• Basic bash scripting for penetration testers

    When it comes to pen testing using a linux distro, bash scripting can really help you out by speeding things up. You can quickly and easily create scripts on the fly to aid your assessment.

    Example 1:

    So lets say I wanted to do a quick ping sweep using nmap. I am going to use switch -oG to make a grepable file.

    1
    nmap -sP 10.10.101.0/24 -oG ipaddr.txt

    Lets display the contents of ipaddr.txt.

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    80
    81
    82
    83
    84
    85
    86
    87
    88
    89
    90
    91
    92
    93
    94
    95
    96
    97
    98
    99
    100
    101
    102
    103
    104
    105
    106
    107
    108
    109
    110
    111
    112
    113
    114
    115
    116
    117
    118
    119
    120
    121
    122
    123
    124
    125
    126
    127
    128
    129
    130
    131
    132
    133
    134
    135
    136
    137
    138
    139
    140
    141
    142
    143
    144
    145
    146
    147
    148
    149
    150
    151
    152
    153
    154
    155
    156
    157
    158
    159
    160
    161
    162
    163
    164
    165
    166
    167
    168
    169
    170
    171
    172
    173
    174
    175
    176
    177
    178
    179
    180
    181
    182
    183
    184
    185
    186
    187
    188
    189
    190
    191
    192
    193
    194
    195
    196
    197
    198
    199
    200
    201
    202
    203
    204
    205
    206
    207
    208
    209
    210
    211
    212
    213
    214
    215
    216
    217
    218
    219
    220
    221
    222
    223
    224
    225
    226
    227
    228
    229
    230
    231
    232
    233
    234
    235
    236
    237
    238
    239
    240
    241
    242
    243
    244
    245
    246
    247
    248
    249
    250
    251
    252
    253
    254
    255
    256
    257
    258
    259
    260
    cat ipaddr.txt
    # Nmap 5.51 scan initiated Sat Jul 30 16:07:02 2011 as: nmap -v -sP -oG ipaddr.txt 10.10.101.0/24
    # Ports scanned: TCP(0;) UDP(0;) SCTP(0;) PROTOCOLS(0;)
    Host: 10.10.101.0 ()    Status: Down
    Host: 10.10.101.1 ()    Status: Down
    Host: 10.10.101.2 ()    Status: Down
    Host: 10.10.101.3 ()    Status: Down
    Host: 10.10.101.4 ()    Status: Down
    Host: 10.10.101.5 ()    Status: Down
    Host: 10.10.101.6 ()    Status: Down
    Host: 10.10.101.7 ()    Status: Down
    Host: 10.10.101.8 ()    Status: Down
    Host: 10.10.101.9 ()    Status: Down
    Host: 10.10.101.10 ()   Status: Down
    Host: 10.10.101.11 ()   Status: Up
    Host: 10.10.101.12 ()   Status: Down
    Host: 10.10.101.13 ()   Status: Up
    Host: 10.10.101.14 ()   Status: Down
    Host: 10.10.101.15 ()   Status: Down
    Host: 10.10.101.16 ()   Status: Down
    Host: 10.10.101.17 ()   Status: Down
    Host: 10.10.101.18 ()   Status: Down
    Host: 10.10.101.19 ()   Status: Down
    Host: 10.10.101.20 ()   Status: Down
    Host: 10.10.101.21 ()   Status: Down
    Host: 10.10.101.22 ()   Status: Down
    Host: 10.10.101.23 ()   Status: Down
    Host: 10.10.101.24 ()   Status: Down
    Host: 10.10.101.25 ()   Status: Down
    Host: 10.10.101.26 ()   Status: Down
    Host: 10.10.101.27 ()   Status: Down
    Host: 10.10.101.28 ()   Status: Down
    Host: 10.10.101.29 ()   Status: Down
    Host: 10.10.101.30 ()   Status: Down
    Host: 10.10.101.31 ()   Status: Down
    Host: 10.10.101.32 ()   Status: Down
    Host: 10.10.101.33 ()   Status: Down
    Host: 10.10.101.34 ()   Status: Down
    Host: 10.10.101.35 ()   Status: Down
    Host: 10.10.101.36 ()   Status: Down
    Host: 10.10.101.37 ()   Status: Down
    Host: 10.10.101.38 ()   Status: Down
    Host: 10.10.101.39 ()   Status: Down
    Host: 10.10.101.40 ()   Status: Down
    Host: 10.10.101.41 ()   Status: Down
    Host: 10.10.101.42 ()   Status: Down
    Host: 10.10.101.43 ()   Status: Down
    Host: 10.10.101.44 ()   Status: Down
    Host: 10.10.101.45 ()   Status: Down
    Host: 10.10.101.46 ()   Status: Down
    Host: 10.10.101.47 ()   Status: Down
    Host: 10.10.101.48 ()   Status: Down
    Host: 10.10.101.49 ()   Status: Down
    Host: 10.10.101.50 ()   Status: Down
    Host: 10.10.101.51 ()   Status: Down
    Host: 10.10.101.52 ()   Status: Down
    Host: 10.10.101.53 ()   Status: Down
    Host: 10.10.101.54 ()   Status: Down
    Host: 10.10.101.55 ()   Status: Down
    Host: 10.10.101.56 ()   Status: Down
    Host: 10.10.101.57 ()   Status: Down
    Host: 10.10.101.58 ()   Status: Down
    Host: 10.10.101.59 ()   Status: Down
    Host: 10.10.101.60 ()   Status: Up
    Host: 10.10.101.61 ()   Status: Down
    Host: 10.10.101.62 ()   Status: Down
    Host: 10.10.101.63 ()   Status: Down
    Host: 10.10.101.64 ()   Status: Down
    Host: 10.10.101.65 ()   Status: Down
    Host: 10.10.101.66 ()   Status: Down
    Host: 10.10.101.67 ()   Status: Down
    Host: 10.10.101.68 ()   Status: Down
    Host: 10.10.101.69 ()   Status: Down
    Host: 10.10.101.70 ()   Status: Down
    Host: 10.10.101.71 ()   Status: Down
    Host: 10.10.101.72 ()   Status: Down
    Host: 10.10.101.73 ()   Status: Down
    Host: 10.10.101.74 ()   Status: Down
    Host: 10.10.101.75 ()   Status: Down
    Host: 10.10.101.76 ()   Status: Down
    Host: 10.10.101.77 ()   Status: Down
    Host: 10.10.101.78 ()   Status: Down
    Host: 10.10.101.79 ()   Status: Down
    Host: 10.10.101.80 ()   Status: Down
    Host: 10.10.101.81 ()   Status: Down
    Host: 10.10.101.82 ()   Status: Down
    Host: 10.10.101.83 ()   Status: Down
    Host: 10.10.101.84 ()   Status: Down
    Host: 10.10.101.85 ()   Status: Down
    Host: 10.10.101.86 ()   Status: Down
    Host: 10.10.101.87 ()   Status: Down
    Host: 10.10.101.88 ()   Status: Down
    Host: 10.10.101.89 ()   Status: Down
    Host: 10.10.101.90 ()   Status: Down
    Host: 10.10.101.91 ()   Status: Down
    Host: 10.10.101.92 ()   Status: Down
    Host: 10.10.101.93 ()   Status: Down
    Host: 10.10.101.94 ()   Status: Down
    Host: 10.10.101.95 ()   Status: Down
    Host: 10.10.101.96 ()   Status: Down
    Host: 10.10.101.97 ()   Status: Down
    Host: 10.10.101.98 ()   Status: Down
    Host: 10.10.101.99 ()   Status: Down
    Host: 10.10.101.100 ()  Status: Down
    Host: 10.10.101.101 ()  Status: Up
    Host: 10.10.101.102 ()  Status: Down
    Host: 10.10.101.103 ()  Status: Down
    Host: 10.10.101.104 ()  Status: Down
    Host: 10.10.101.105 ()  Status: Down
    Host: 10.10.101.106 ()  Status: Down
    Host: 10.10.101.107 ()  Status: Down
    Host: 10.10.101.108 ()  Status: Down
    Host: 10.10.101.109 ()  Status: Down
    Host: 10.10.101.110 ()  Status: Down
    Host: 10.10.101.111 ()  Status: Down
    Host: 10.10.101.112 ()  Status: Down
    Host: 10.10.101.113 ()  Status: Down
    Host: 10.10.101.114 ()  Status: Down
    Host: 10.10.101.115 ()  Status: Down
    Host: 10.10.101.116 ()  Status: Down
    Host: 10.10.101.117 ()  Status: Down
    Host: 10.10.101.118 ()  Status: Down
    Host: 10.10.101.119 ()  Status: Down
    Host: 10.10.101.120 ()  Status: Down
    Host: 10.10.101.121 ()  Status: Down
    Host: 10.10.101.122 ()  Status: Down
    Host: 10.10.101.123 ()  Status: Down
    Host: 10.10.101.124 ()  Status: Down
    Host: 10.10.101.125 ()  Status: Down
    Host: 10.10.101.126 ()  Status: Down
    Host: 10.10.101.127 ()  Status: Down
    Host: 10.10.101.128 ()  Status: Down
    Host: 10.10.101.129 ()  Status: Down
    Host: 10.10.101.130 ()  Status: Down
    Host: 10.10.101.131 ()  Status: Down
    Host: 10.10.101.132 ()  Status: Down
    Host: 10.10.101.133 ()  Status: Down
    Host: 10.10.101.134 ()  Status: Down
    Host: 10.10.101.135 ()  Status: Down
    Host: 10.10.101.136 ()  Status: Down
    Host: 10.10.101.137 ()  Status: Down
    Host: 10.10.101.138 ()  Status: Down
    Host: 10.10.101.139 ()  Status: Down
    Host: 10.10.101.140 ()  Status: Down
    Host: 10.10.101.141 ()  Status: Down
    Host: 10.10.101.142 ()  Status: Down
    Host: 10.10.101.143 ()  Status: Down
    Host: 10.10.101.144 ()  Status: Down
    Host: 10.10.101.145 ()  Status: Down
    Host: 10.10.101.146 ()  Status: Down
    Host: 10.10.101.147 ()  Status: Down
    Host: 10.10.101.148 ()  Status: Down
    Host: 10.10.101.149 ()  Status: Down
    Host: 10.10.101.150 ()  Status: Down
    Host: 10.10.101.151 ()  Status: Down
    Host: 10.10.101.152 ()  Status: Down
    Host: 10.10.101.153 ()  Status: Down
    Host: 10.10.101.154 ()  Status: Down
    Host: 10.10.101.155 ()  Status: Down
    Host: 10.10.101.156 ()  Status: Down
    Host: 10.10.101.157 ()  Status: Down
    Host: 10.10.101.158 ()  Status: Down
    Host: 10.10.101.159 ()  Status: Down
    Host: 10.10.101.160 ()  Status: Down
    Host: 10.10.101.161 ()  Status: Down
    Host: 10.10.101.162 ()  Status: Down
    Host: 10.10.101.163 ()  Status: Down
    Host: 10.10.101.164 ()  Status: Down
    Host: 10.10.101.165 ()  Status: Down
    Host: 10.10.101.166 ()  Status: Down
    Host: 10.10.101.167 ()  Status: Down
    Host: 10.10.101.168 ()  Status: Down
    Host: 10.10.101.169 ()  Status: Down
    Host: 10.10.101.170 ()  Status: Down
    Host: 10.10.101.171 ()  Status: Down
    Host: 10.10.101.172 ()  Status: Down
    Host: 10.10.101.173 ()  Status: Down
    Host: 10.10.101.174 ()  Status: Down
    Host: 10.10.101.175 ()  Status: Down
    Host: 10.10.101.176 ()  Status: Down
    Host: 10.10.101.177 ()  Status: Down
    Host: 10.10.101.178 ()  Status: Down
    Host: 10.10.101.179 ()  Status: Down
    Host: 10.10.101.180 ()  Status: Down
    Host: 10.10.101.181 ()  Status: Down
    Host: 10.10.101.182 ()  Status: Down
    Host: 10.10.101.183 ()  Status: Down
    Host: 10.10.101.184 ()  Status: Down
    Host: 10.10.101.185 ()  Status: Down
    Host: 10.10.101.186 ()  Status: Down
    Host: 10.10.101.187 ()  Status: Down
    Host: 10.10.101.188 ()  Status: Down
    Host: 10.10.101.189 ()  Status: Down
    Host: 10.10.101.190 ()  Status: Down
    Host: 10.10.101.191 ()  Status: Down
    Host: 10.10.101.192 ()  Status: Down
    Host: 10.10.101.193 ()  Status: Down
    Host: 10.10.101.194 ()  Status: Down
    Host: 10.10.101.195 ()  Status: Down
    Host: 10.10.101.196 ()  Status: Down
    Host: 10.10.101.197 ()  Status: Down
    Host: 10.10.101.198 ()  Status: Down
    Host: 10.10.101.199 ()  Status: Down
    Host: 10.10.101.200 ()  Status: Down
    Host: 10.10.101.201 ()  Status: Down
    Host: 10.10.101.202 ()  Status: Down
    Host: 10.10.101.203 ()  Status: Down
    Host: 10.10.101.204 ()  Status: Down
    Host: 10.10.101.205 ()  Status: Down
    Host: 10.10.101.206 ()  Status: Down
    Host: 10.10.101.207 ()  Status: Down
    Host: 10.10.101.208 ()  Status: Down
    Host: 10.10.101.209 ()  Status: Down
    Host: 10.10.101.210 ()  Status: Down
    Host: 10.10.101.211 ()  Status: Down
    Host: 10.10.101.212 ()  Status: Down
    Host: 10.10.101.213 ()  Status: Down
    Host: 10.10.101.214 ()  Status: Down
    Host: 10.10.101.215 ()  Status: Down
    Host: 10.10.101.216 ()  Status: Down
    Host: 10.10.101.217 ()  Status: Down
    Host: 10.10.101.218 ()  Status: Down
    Host: 10.10.101.219 ()  Status: Down
    Host: 10.10.101.220 ()  Status: Down
    Host: 10.10.101.221 ()  Status: Down
    Host: 10.10.101.222 ()  Status: Down
    Host: 10.10.101.223 ()  Status: Down
    Host: 10.10.101.224 ()  Status: Down
    Host: 10.10.101.225 ()  Status: Down
    Host: 10.10.101.226 ()  Status: Down
    Host: 10.10.101.227 ()  Status: Down
    Host: 10.10.101.228 ()  Status: Down
    Host: 10.10.101.229 ()  Status: Down
    Host: 10.10.101.230 ()  Status: Down
    Host: 10.10.101.231 ()  Status: Down
    Host: 10.10.101.232 ()  Status: Down
    Host: 10.10.101.233 ()  Status: Down
    Host: 10.10.101.234 ()  Status: Down
    Host: 10.10.101.235 ()  Status: Down
    Host: 10.10.101.236 ()  Status: Down
    Host: 10.10.101.237 ()  Status: Down
    Host: 10.10.101.238 ()  Status: Down
    Host: 10.10.101.239 ()  Status: Down
    Host: 10.10.101.240 ()  Status: Down
    Host: 10.10.101.241 ()  Status: Down
    Host: 10.10.101.242 ()  Status: Down
    Host: 10.10.101.243 ()  Status: Down
    Host: 10.10.101.244 ()  Status: Down
    Host: 10.10.101.245 ()  Status: Down
    Host: 10.10.101.246 ()  Status: Down
    Host: 10.10.101.247 ()  Status: Down
    Host: 10.10.101.248 ()  Status: Down
    Host: 10.10.101.249 ()  Status: Down
    Host: 10.10.101.250 ()  Status: Down
    Host: 10.10.101.251 ()  Status: Down
    Host: 10.10.101.252 ()  Status: Down
    Host: 10.10.101.253 ()  Status: Down
    Host: 10.10.101.254 ()  Status: Down
    Host: 10.10.101.255 ()  Status: Down
    # Nmap done at Sat Jul 30 16:07:05 2011 -- 256 IP addresses (4 hosts up) scanned in 3.16 seconds

    We are only concerned about the hosts that are alive, so how do we quickly get a listing of just hosts that are up?
    Like this:

    1
    2
    3
    4
    5
    cat ipaddr.txt | grep Up | cut -d" " -f2
    10.10.101.11
    10.10.101.13
    10.10.101.60
    10.10.101.101

    This command cats the contents of ipaddr.txt, uses grep to just show matches for the keyword Up, uses cut with the delimiter of a space, and just displays field 2. The results are a nice clean listing of IP addresses.

    Example 2:

    So lets say you got a listing of domains you want to attempt zone transfers on. You don’t want to slowly try each one individually. Most pentests are limited in time so you want to get as much as possible done in a short period.
    So lets whip a script up that does this based on your list of domains.
    The domains listing format will be a text file with:

    1
    2
    3
    gooble.com
    testcompany.net
    fakecompany.org

    Save this file as domains.txt and get scripting on a tool that attempts zone transfers on your list.

    1
    2
    3
    4
    5
    #!/bin/bash
    for i in $(cat domains.txt)
      do host -l $i
    done

    Save the script as zonetransfer.sh and run:

    1
    chmod +x zontransfer.sh

    This will make the file executable. Also make sure domains.txt is in the same folder as the script.

    Example 3:

    So lets say you have a bunch of failed zone transfers because the company you are doing a pentest for blocks zone transfers from anyone but their DNS servers. If you happen to have a particular subnet in your scope, you can attempt do reverse lookups of each IP to gather dns PTR records. If you did each IP individually it would take a decent amount of time. Lets have bash do the work for us.

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    #!/bin/bash
    i="1"
    echo "Please enter first 3 octets. e.g 192.168.1"
    read subnet
            while [ $i -le 254 ]; do
            host -l "$subnet"."$i"
            i=$(( $i + 1))
            done

    This bash script will iterate IP 1 through 254 doing reverse lookups of each IP address.

    Example 4:

    So in this example we will assume you have root access to a compromised linux server. You want to gather information from the server to place in your pentest report and to assist in possibly compromising additional servers.

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    #!/bin/bash
    echo "#############################" >> .gathered_info
    echo "#Linux info gather script" >> .gathered_info
    echo "#############################" >> .gathered_info
    echo " " >> .gathered_info
    echo "[+]Running whoami..."
    echo "*********WHOAMI**************" >> .gathered_info
    whoami >> .gathered_info
    echo "[+]Gathering hosts..."
    echo "*********HOSTS FILE**********" >> .gathered_info
    echo " " >> .gathered_info
    cat /etc/hosts >> .gathered_info
    echo " " >> .gathered_info
    echo "[+]Gathering network info..."
    echo "*********IFCONFIG************" >> .gathered_info
    echo " " >> .gathered_info
    /sbin/ifconfig >> .gathered_info
    echo " " >> .gathered_info
    echo "[+]Gathering arp info..."
    echo "*********ARP****************" >> .gathered_info
    echo " " >> .gathered_info
    /usr/sbin/arp -a >> .gathered_info
    echo " " >> .gathered_info
    echo "[+]Gathering IPtables..."
    echo "********IPtables************" >> .gathered_info
    echo " " >> .gathered_info
    /sbin/iptables -L >> .gathered_info
    echo " " >> .gathered_info
    echo "[+]Gathering Route info..."
    echo "********Route info**********" >> .gathered_info
    echo " " >> .gathered_info
    /sbin/route >> .gathered_info
    echo " " >> .gathered_info
    echo "[+]Gathering Shadow file..."
    echo "********Shadow file*********" >> .gathered_info
    echo " " >> .gathered_info
    /bin/cat /etc/shadow >> .gathered_info
    echo " " >> .gathered_info
    echo "****************************" >> .gathered_info

    The end result is all gathered info placed neatly in a hidden text file. It certainly beats running each command manually to gather information.

    I hope these examples show you the power and flexibility of bash whether used in penetration testing or even everyday system administration



  • A TCP Proxy in Perl

    Several weeks ago my friend Madars was in an airport in the Netherlands and he wanted to login into his server via ssh. It turned out that their public internet had only ports 80 and 443 open so he couldn’t do that. He asked me if I could proxy either port 80 or 443 to his server. Surely, I had a solution. I modified the tcp proxy server

    sudo ./tcp-proxy2.pl 443 madars-server.com:22

    This proxied the port 443 on my server to madars-server.com ssh port. Now Madars could do

    ssh -p 443 catonmat.net

    and he got connected to his server. Mission accomplished.

    Here is the code of tcp-proxy2.pl,

    use warnings;
    use strict;
    
    use IO::Socket::INET;
    use IO::Select;
    
    my @allowed_ips = ('all', '10.10.10.5');
    my $ioset = IO::Select->new;
    my %socket_map;
    
    my $debug = 1;
    
    sub new_conn {
        my ($host, $port) = @_;
        return IO::Socket::INET->new(
            PeerAddr => $host,
            PeerPort => $port
        ) || die "Unable to connect to $host:$port: $!";
    }
    
    sub new_server {
        my ($host, $port) = @_;
        my $server = IO::Socket::INET->new(
            LocalAddr => $host,
            LocalPort => $port,
            ReuseAddr => 1,
            Listen    => 100
        ) || die "Unable to listen on $host:$port: $!";
    }
    
    sub new_connection {
        my $server = shift;
        my $remote_host = shift;
        my $remote_port = shift;
    
        my $client = $server->accept;
        my $client_ip = client_ip($client);
    
        unless (client_allowed($client)) {
            print "Connection from $client_ip denied.\n" if $debug;
            $client->close;
            return;
        }
        print "Connection from $client_ip accepted.\n" if $debug;
    
        my $remote = new_conn($remote_host, $remote_port);
        $ioset->add($client);
        $ioset->add($remote);
    
        $socket_map{$client} = $remote;
        $socket_map{$remote} = $client;
    }
    
    sub close_connection {
        my $client = shift;
        my $client_ip = client_ip($client);
        my $remote = $socket_map{$client};
        
        $ioset->remove($client);
        $ioset->remove($remote);
    
        delete $socket_map{$client};
        delete $socket_map{$remote};
    
        $client->close;
        $remote->close;
    
        print "Connection from $client_ip closed.\n" if $debug;
    }
    
    sub client_ip {
        my $client = shift;
        return inet_ntoa($client->sockaddr);
    }
    
    sub client_allowed {
        my $client = shift;
        my $client_ip = client_ip($client);
        return grep { $_ eq $client_ip || $_ eq 'all' } @allowed_ips;
    }
    
    die "Usage: $0 <local port> <remote_host:remote_port>" unless @ARGV == 2;
    
    my $local_port = shift;
    my ($remote_host, $remote_port) = split ':', shift();
    
    
    print "Starting a server on 0.0.0.0:$local_port\n";
    my $server = new_server('0.0.0.0', $local_port);
    $ioset->add($server);
    
    while (1) {
        for my $socket ($ioset->can_read) {
            if ($socket == $server) {
                new_connection($server, $remote_host, $remote_port);
            }
            else {
                next unless exists $socket_map{$socket};
                my $remote = $socket_map{$socket};
                my $buffer;
                my $read = $socket->sysread($buffer, 4096);
                if ($read) {
                    $remote->syswrite($buffer);
                }
                else {
                    close_connection($socket);
                }
            }
        }
    }
    


  • TCP Traceroute

    Did you know you could traceroute over the TCP protocol?

    The regular traceroute usually uses either ICMP or UDP protocols. Unfortunately firewalls and routers often block the ICMP protocol completely or disallow the ICMP echo requests (ping requests), and/or block various UDP ports.

    However you’d rarely have firewalls and routers drop TCP protocol on port 80 because it’s the web’s port.

    Check this out. Let’s try to traceroute www.microsoft.com using ICMP protocol:

    # traceroute -I www.microsoft.com  
    traceroute to www.microsoft.com (65.55.57.27), 30 hops max, 60 byte packets
     1  50.57.125.2 (50.57.125.2)  0.552 ms  0.647 ms  0.742 ms
     2  core1-aggr701a-3.ord1.rackspace.net (184.106.126.50)  0.415 ms  0.555 ms  0.653 ms
     3  corea.ord1.rackspace.net (184.106.126.128)  0.707 ms  0.873 ms  0.984 ms
     4  bbr1.ord1.rackspace.net (184.106.126.147)  1.345 ms  1.341 ms  1.337 ms
     5  * * *
     6  204.152.140.33 (204.152.140.33)  3.614 ms  3.747 ms  3.244 ms
     7  xe-0-2-0-0.ch1-96c-2b.ntwk.msn.net (207.46.46.49)  3.319 ms  4.019 ms  4.010 ms
     8  ge-7-0-0-0.co1-64c-1a.ntwk.msn.net (207.46.40.94)  53.543 ms  53.105 ms  53.074 ms
     9  xe-5-2-0-0.co1-96c-1b.ntwk.msn.net (207.46.40.165)  52.942 ms  52.710 ms  52.670 ms
    10  * * *
    11  * * *
    12  * * *
    13  * * *
    

    We get lots of * * * and we’ve no idea how the packets reach www.microsoft.com.

    Now let’s try UDP traceroute:

    # traceroute -U www.microsoft.com
    traceroute to www.microsoft.com (65.55.57.27), 30 hops max, 60 byte packets
     1  50.57.125.2 (50.57.125.2)  0.529 ms  0.599 ms  0.662 ms
     2  core1-aggr701a-3.ord1.rackspace.net (184.106.126.50)  0.480 ms  0.571 ms  0.658 ms
     3  corea.ord1.rackspace.net (184.106.126.128)  0.507 ms corea.ord1.rackspace.net (184.106.126.124)  0.463 ms  0.569 ms
     4  bbr1.ord1.rackspace.net (184.106.126.145)  1.345 ms  1.322 ms  1.290 ms
     5  * * *
     6  * 204.152.140.35 (204.152.140.35)  2.697 ms *
     7  xe-0-2-0-0.ch1-96c-2b.ntwk.msn.net (207.46.46.49)  3.665 ms ge-7-0-0-0.co1-64c-1a.ntwk.msn.net (207.46.40.94)  53.363 ms  52.597 ms
     8  xe-3-1-0-0.co1-96c-1b.ntwk.msn.net (207.46.33.190)  52.284 ms  52.643 ms xe-0-1-0-0.co1-96c-1a.ntwk.msn.net (207.46.33.177)  52.665 ms
     9  * * *
    10  * * *
    11  * * *
    12  * * *
    13  * * *
    

    Same. Finally let’s try traceroute over TCP protocol port 80:

    # traceroute -T -p 80 www.microsoft.com
    traceroute to www.microsoft.com (65.55.57.27), 30 hops max, 60 byte packets
     1  50.57.125.2 (50.57.125.2)  0.540 ms  0.629 ms  0.709 ms
     2  core1-aggr701a-3.ord1.rackspace.net (184.106.126.50)  0.486 ms  0.604 ms  0.691 ms
     3  corea.ord1.rackspace.net (184.106.126.128)  0.511 ms corea.ord1.rackspace.net (184.106.126.124)  0.564 ms  0.810 ms
     4  bbr1.ord1.rackspace.net (184.106.126.147)  1.339 ms  1.310 ms bbr1.ord1.rackspace.net (184.106.126.145)  1.307 ms
     5  chi-8075.msn.net (206.223.119.27)  3.619 ms  2.560 ms  2.528 ms
     6  * 204.152.140.35 (204.152.140.35)  3.640 ms *
     7  ge-7-0-0-0.co1-64c-1a.ntwk.msn.net (207.46.40.94)  52.523 ms xe-0-2-0-0.ch1-96c-2b.ntwk.msn.net (207.46.46.49)  3.825 ms xe-1-2-0-0.ch1-96c-2b.ntwk.msn.net (207.46.46.53)  3.355 ms
     8  xe-0-1-0-0.co1-96c-1a.ntwk.msn.net (207.46.33.177)  61.042 ms  61.032 ms  60.457 ms
     9  * * xe-5-2-0-0.co1-96c-1b.ntwk.msn.net (207.46.40.165)  100.069 ms
    10  65.55.57.27 (65.55.57.27)  53.868 ms  53.038 ms  52.097 ms
    

    A full network path to www.microsoft.com!

    There are various different traceroute implementations and if your system doesn’t have one that supports tcp protocol, I suggest you either get the new modern implementation of traceroute, or get the tcptraceroute by Michael Toren.



  • TCP Port Scanner in Bash

    I just had this quick idea to write a tcp port scanner in bash. Bash supports the special /dev/tcp/host/port file that you can read/write. Writing to this special file makes bash open a tcp connection to host:port. If writing to the port succeeds, the port is open, else the port is closed.

    So at first I wrote this quick script:

    for port in {1..65535}; do
      echo >/dev/tcp/google.com/$port &&
        echo "port $port is open" ||
        echo "port $port is closed"
    done
    

    This loops over ports 1-65535 and tries to open google.com:$port. However this doesn’t work that well because if the port is closed, it takes bash like 2 minutes to realize that.

    To solve this I needed something like alarm(2) to interrupt bash. Bash doesn’t have a built-in alarm function, so I had to write my own using Perl:

    alarm() {
      perl -e '
        eval {
          $SIG{ALRM} = sub { die };
          alarm shift;
          system(@ARGV);
        };
        if ($@) { exit 1 }
      ' "$@";
    }
    

    This alarm function takes two args: seconds for the alarm call, and the code to execute. If the code doesn’t execute in the given time, the function fails.

    Once I had this, I could take my earlier code and just call it through alarm:

    for port in {1..65535}; do
      alarm 1 "echo >/dev/tcp/google.com/$port" &&
        echo "port $port is open" ||
        echo "port $port is closed"
    done
    

    This is working! Now if bash freezes because of a closed port, the alarm 1 will kill the probe in 1 second, and the script will move to the next port.

    I went ahead and turned this into a proper scan function:

    scan() {
      if [[ -z $1 || -z $2 ]]; then
        echo "Usage: $0 <host> <port, ports, or port-range>"
        return
      fi
    
      local host=$1
      local ports=()
      case $2 in
        *-*)
          IFS=- read start end <<< "$2"
          for ((port=start; port <= end; port++)); do
            ports+=($port)
          done
          ;;
        *,*)
          IFS=, read -ra ports <<< "$2"
          ;;
        *)
          ports+=($2)
          ;;
      esac
    
    
      for port in "${ports[@]}"; do
        alarm 1 "echo >/dev/tcp/$host/$port" &&
          echo "port $port is open" ||
          echo "port $port is closed"
      done
    }
    

    You can run the scan function from your shell. It takes two arguments: the host to scan, and a list of ports to scan (such as 22,80,443), or a range of ports to scan (such as 1-1024), or an individual port to scan (such as 80).

    Here is what happens when I run scan google.com 78-82:

    $ scan google.com 78-82 
    port 78 is closed
    port 79 is closed
    port 80 is open
    port 81 is closed
    port 82 is closed
    

    Similarly you can write an udp port scanner. Just replace /dev/tcp/ with /dev/udp/.

    Update

    It turns out GNU’s coreutils include timeout utility that runs a command with a time limit. Using timeout we can rewrite the tcp proxy without using Perl for SIGALRM:

    $ timeout 1 bash -c "echo >/dev/tcp/$host/$port" &&
        echo "port $port is open" ||
        echo "port $port is closed"
    


  • Best Linux Penetration Testing Distributions


    Linux Penetration Testing Distributions are a group of special purpose Linux distributions used for analysing and evaluating system and network security. Almost all of those distros can run LIVE from an optical or a usb drive, and most of them are installable and can be used as a standalone Linux distribution. The main user demography includes network and computer security enthusiasts, security students and companies interested in security audits.

    A penetration test, or the short form pentest, is an attack on a computer system with the intention of finding security weaknesses, potentially gaining unrestricted access to the system and the data.

    Pen-testing distros have come a long way. These new pentest distros are being developed and maintained with user friendly design in mind and anyone with moderate Linux knowledge can use them. Tutorials and HOW TO articles are usually available for public usages.

    Now lets have a look at some of the best linux penetration testing distributions:

    Kali Linux

    Best Linux Penetration Testing Distributions:  kali

    Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security Ltd. It was developed by Mati Aharoni and Devon Kearns of Offensive Security through the rewrite of BackTrack, their previous forensics Linux distribution.

    Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker), Aircrack-ng (a software suite for penetration-testing wireless LANs), Burp suite and OWASP ZAP (both web application security scanners). Kali Linux can run natively when installed on a computer’s hard disk, can be booted from a live CD or live USB, or it can run within a virtual machine. It is a supported platform of the Metasploit Project’s Metasploit Framework, a tool for developing and executing security exploits.

    Kali Linux is distributed in 32- and 64-bit images for use on hosts based on the x86 instruction set, and as an image for the ARM architecture for use on the Raspberry Pi computer and on Samsung’s ARM Chromebook.

    Source && Download

    Best Linux Penetration Testing Distributions: kali download

     

     

    Pentoo

    Best Linux Penetration Testing Distributions: pentoo

    Pentoo is a Live CD and Live USB designed for penetration testing and security assessment. Based on Gentoo Linux, Pentoo is provided both as 32 and 64 bit installable livecd. Pentoo is also available as an overlayfor an existing Gentoo installation. It features packet injection patched wifi drivers, GPGPU cracking software, and lots of tools for penetration testing and security assessment. The Pentoo kernel includes grsecurity and PAX hardening and extra patches – with binaries compiled from a hardened toolchain with the latest nightly versions of some tools available.

    It’s basically a gentoo install with lots of customized tools, customized kernel, and much more. Here is a non-exhaustive list of the features currently included :

    •     Hardened Kernel with aufs patches
    •     Backported Wifi stack from latest stable kernel release
    •     Module loading support ala slax
    •     Changes saving on usb stick
    •     XFCE4 wm
    •     Cuda/OPENCL cracking support with development tools
    •     System updates if you got it finally installed

    Put simply, Pentoo is Gentoo with the pentoo overlay. This overlay is available in layman so all you have to do is layman -L and layman -a pentoo.

    Pentoo has a pentoo/pentoo meta ebuild and multiple pentoo profiles, which will install all the pentoo tools based on USE flags. The package list is fairly adequate. If you’re a Gentoo user, you might want to use Pentoo as this is the closest distribution with similar build.

    Source && Download

    Best Linux Penetration Testing Distributions: pentoo download

    BackBox Linux

    Best Linux Penetration Testing Distributions: backbox

    BackBox is a Linux distribution based on Ubuntu Desktop, and designed for performing penetration testing, incident response, computer forensics, and intelligence gathering. The main aim of BackBox is providing an alternative, highly customizable and well performing system. BackBox uses the light window manager Xfce.

    It includes some of the most used security and analysis Linux tools, aiming for a wide spread of goals, ranging from web application analysis to network analysis, from stress tests to sniffing, also including vulnerability assessment, computer forensic analysis and exploitation.

    Part of the power of this distribution comes from its Launchpad repository core, constantly updated to the latest stable version of the most known and used ethical hacking tools. The integration and development of new tools in the distribution follows the open source community, particularly the Debian Free Software Guidelines criteria.

     

    Source && Download

    Best Linux Penetration Testing Distributions: backbox download

     

    Parrot Security OS

    Best Linux Penetration Testing Distributions: parrot

    Parrot Security OS is a cloud friendly operating system designed for Pentesting, Computer Forensic, Reverse engineering, Hacking, Cloud pentesting, privacy/anonimity and cryptography. Based on Debian and developed by Frozenbox network.

    Parrot is designed for everyone, from the Pro pentester to the newbie, because it provides the most professional tools combined in a easy to use, fast and lightweight pentesting environment, and it can be used also for an everyday use.

    Parrot Security OS is a Debian-based GNU/Linux distribution designed to perform security and penetration tests, do forensic analysis or act in anonymity. It uses the MATE Desktop Environment and it is available as a live lightweight installable ISO image for 32bit and 64bit processors with forensic options at boot, optimizations for programmers and new custom pentesting tools.

    Source && Download

    Best Linux Penetration Testing Distributions parrotsec download

     

    BlackArch Linux

    Best Linux Penetration Testing Distributions: blackarch

    BlackArch Linux is a lightweight expansion to Arch Linux for penetration testers and security researchers. The repository contains 1082 tools. You can install tools individually or in groups. BlackArch is compatible with existing Arch installs. For more information, see the installation instructions.

    Please note that although BlackArch is past the beta stage, it is still a relatively new project

    BlackArch Linux is not for newbies, you can (and most probably will )  get lost even during the install stage. If you’re moderately comfortable with Arch ( or Linux in general ) we highly recommend it.

    Source && Download

    Best Linux Penetration Testing Distributions blackarch download

     

    Samurai Web Testing Framework

    Best Linux Penetration Testing Distributions: samurai

    The Samurai Web Testing Framework is a live linux environment that has been pre-configured to function as a web pen-testing environment. The CD contains the best of the open source and free tools that focus on testing and attacking websites. In developing this environment, we have based our tool selection on the tools we use in our security practice. We have included the tools used in all four steps of a web pen-test.

    Starting with reconnaissance, we have included tools such as the Fierce domain scanner and Maltego. For mapping, we have included tools such WebScarab and ratproxy. We then chose tools for discovery. These would include w3af and burp. For exploitation, the final stage, we included BeEF, AJAXShell and much more. This CD also includes a pre-configured wiki, set up to be the central information store during your pen-test.

    Most penetration tests are focused on either network attacks or web application attacks. Given this separation, many pen testers themselves have understandably followed suit, specializing in one type of test or the other. While such specialization is a sign of a vibrant, healthy penetration testing industry, tests focused on only one of these aspects of a target environment often miss the real business risks of vulnerabilities discovered and exploited by determined and skilled attackers. By combining web app attacks such as SQL injection, Cross-Site Scripting, and Remote File Includes with network attacks such as port scanning, service compromise, and client-side exploitation, the bad guys are significantly more lethal. Penetration testers and the enterprises who use their services need to understand these blended attacks and how to measure whether they are vulnerable to them. This session provides practical examples of penetration tests that combine such attack vectors, and real-world advice for conducting such tests against your own organization.

    Samurai Web Testing Framework looks like a very clean distribution and the developers are focused on what they do best, rather than trying to add everything in one single distribution and thus making supporting tougher. This is in a way good as if you’re just starting, you should start with a small set of tools and then move on to next step.

    Source && Download

    Best Linux Penetration Testing Distributions: samurai download

    WEAKERTH4N

    Best Linux Penetration Testing Distributions: weak

    Weakerth4n has a very well maintained website and a devoted community. Built from Debian Squeeze (Fluxbox within a desktop environment) this operating system is particularly suited for WiFi hacking as it contains plenty of Wireless cracking and hacking tools.

    Tools includes: Wifi attacks, SQL Hacking, Cisco Exploitation, Password Cracking, Web Hacking, Bluetooth, VoIP Hacking, Social Engineering, Information Gathering, Fuzzing Android Hacking, Networking and creating Shells.
    Vital Statistics

    •     OS Type: Linux
    •     Based on: Debian, Ubuntu
    •     Origin: Italy
    •     Architecture: i386, x86_64
    •     Desktop: XFCE

    If you look into their website you get the feeling that the maintainers are active and they write a lot of guides and tutorials to help newbies. As this is based on Debian Squeeze, this might be something you would want to give a go.

    Source && Download

    Best Linux Penetration Testing Distributions weaknetlabs

    Matriux

    Best Linux Penetration Testing Distributions: matriux

    The Matriux is a phenomenon that was waiting to happen. It is a fully featured security distribution based on Debian consisting of a powerful bunch of more than 300 open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking, system and network administration, cyber forensics investigations, security testing, vulnerability analysis, and much more. It is a distribution designed for security enthusiasts and professionals, although it can be used normally as your default desktop system.

    With Matriux, you can turn any system into a powerful penetration testing toolkit, without having to install any software into your hardisk. Matriux is designed to run from a Live environment like a CD / DVD or USB stick or it can easily be installed to your hard disk in a few steps. Matriux also includes a set of computer forensics and data recovery tools that can be used for forensic analysis and investigations and data retrieval.

    Matriux is now a member of Open Invention Network (OIN).

    Source && Download

    Best Linux Penetration Testing Distributions matriux download

    DEFT

    Best Linux Penetration Testing Distributions: deft

    DEFT (acronym for Digital Evidence & Forensics Toolkit) is a distribution made for Computer Forensics, with the purpose of running live on systems without tampering or corrupting devices (hard disks, pendrives, etc…) connected to the PC where the boot process takes place.

    The system is based on GNU Linux, it can run live (via DVDROM or USB pendrive), installed or run as a Virtual Appliance on VMware or Virtualbox. Distro employs LXDE as desktop environment and WINE for executing Windows tools under Linux. It features a comfortable mount manager for device management.

    DEFT is paired with DART (acronym for Digital Advanced Response Toolkit), a Forensics System which can be run on Windows and contains the best tools for Forensics and Incident Response. DART features a GUI with logging and integrity check for the instruments here contained.

    Besides all this, the DEFT staff is devoted to implementing and developing applications which are released to Law Enforcement Officers, such as Autopsy 3 for Linux.

    The Linux distribution is made up of a GNU / Linux and DART (Digital Advanced Response Toolkit), suite   dedicated to digital forensics and intelligence activities.

    It is currently developed and maintained by Stefano Fratepietro, with the support of Massimo Dal Cero, Sandro   Rossetti, Paolo Dal Checco, Davide Gabrini, Bartolomeo Bogliolo, Valerio Leomporra and Marco Giorgi.

    Source && Download

    Best Linux Penetration Testing Distributions deftlinux

    CAINE

    Best Linux Penetration Testing Distributions: menu

    Caine is another Italy born/origin Ubuntu based distro.

    Caine (an acronym for Computer Aided Investigative Environment’) is a distribution live oriented to Computer Forensics (computer forensics) historically conceived by Giancarlo Giustini, within a project of Digital Forensics Interdepartmental Research Center for Security (CRIS) of the University of Modena and Reggio Emilia.

    Caine includes:

    • Caine Interface – a user-friendly interface that brings together a number of well-known forensic tools, many of which are open source;
    • Updated and optimized environment to conduct a forensic analysis;
    • Report generator semi-automatic, by which the investigator has a document easily editable and exportable with a summary of the activities;
    • Adherence to the investigative procedure defined recently by Italian Law 48/2008, Law 48/2008,.

    In addition, Caine is the first distribution to include forensic Forensics inside the Caja/Nautilus Scripts and all the patches of security for not to alter the devices in analysis.

    CAINE represents fully the spirit of the Open Source philosophy, because the project is completely open, anyone could take the legacy of the previous developer or project manager.

     

    Source && Download

    Best Linux Penetration Testing Distributions caine

     

    Bugtraq

    Best Linux Penetration Testing Distributions: bugtraq-tools

    Bugtraq is a distribution based on GNU/Linux aimed at digital forensics, penetration testing, Malware Laboratories, and GSM Forensics usehttp://www.bugtraq-team.com/. The current version is Bugtraq-II BlackWidow., based on Ubuntu 12.04 (precise), Debian 7 (Wheezy) and OpenSuse.

    Offers the most comprehensive distribution, optimal, and stable with automated services manager in real time. This distribution has a huge range of penetration, forensic and laboratory tools. Bugtraq is available with XFCE, Gnome and KDE based on Ubuntu, Debian and OpenSuse. The systems are available in 11 different languages.

    Bugtraq was founded by Rubén and Christian on 2010, where they wanted to create a pentesting distribution where you can find it more administrative more stable and friendly, and where also you can find most of the tools already configure it.

    Bugtraq built a Community, in order to improve on every release with users contributions.

    Bugtraq can be installed from a Live DVD or USB drive, the distribution is customized to the last package, configured and updated the kernel including wireless injection patches other distributions do not recognize. There are some special features like automated installation scripts and tools like Nessus, OpenVAS, Greenbone, Nod32, Hashcat,

    Source && Download

    Best Linux Penetration Testing Distributions bugtraq download

     

    NodeZero Linux

    Best Linux Penetration Testing Distributions: node

     

    Penetration testing and security auditing requires specialist tools.The natural path leads us to collecting them all in one handy place. However how that collection is implemented can be critical to how you deploy effective and robust testing.

    It is said the necessity is the mother of all invention, and NodeZero Linux is no different. Our team is built of testers and developers, who have come to the census that live systems do not offer what they need in their security audits. Penetration Testing distributions tend to have historically utilized the “Live” system concept of linux, which really means that they try not to make any permanent effects to a system. Ergo all changes are gone after reboot, and run from media such as discs and USB’s drives. However all that this maybe very handy for occasional testing, its usefulness can be depleted when your testing regularly. Its our believe that “Live System’s” just don’t scale well in a robust testing environment.

    All though NodeZero Linux can be used as a “Live System” for occasional testing, its real strength comes from the understanding that a tester requires a strong and efficient system. This is achieved in our belief by working at a distribution that is a permanent installation, that benefits from a strong selection of tools, integrated with a stable linux environment.

    NodeZero Linux is reliable, stable, and powerful. Based on the industry leading Ubuntu linux distribution, NodeZero Linux takes all the stability and reliability that comes with Ubuntu’s Long Term Support model, and its power comes from the tools configured to live comfortably within the environment.

    So what are you waiting for, download your free and open copy of NodeZero Linux today, because real hackers count from zero!

    Source && Download

    Best Linux Penetration Testing Distributions: nodezero download

     

     



  • IP Table Commands

    
    # 1. Delete all existing rules
    iptables -F
    
    # 2. Set default chain policies
    iptables -P INPUT DROP
    iptables -P FORWARD DROP
    iptables -P OUTPUT DROP
    
    # 3. Block a specific ip-address
    #BLOCK_THIS_IP="x.x.x.x"
    #iptables -A INPUT -s "$BLOCK_THIS_IP" -j DROP
    
    # 4. Allow ALL incoming SSH
    #iptables -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
    #iptables -A OUTPUT -o eth0 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
    
    # 5. Allow incoming SSH only from a sepcific network
    #iptables -A INPUT -i eth0 -p tcp -s 192.168.200.0/24 --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
    #iptables -A OUTPUT -o eth0 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
    
    # 6. Allow incoming HTTP
    #iptables -A INPUT -i eth0 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
    #iptables -A OUTPUT -o eth0 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
    
    # Allow incoming HTTPS
    #iptables -A INPUT -i eth0 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
    #iptables -A OUTPUT -o eth0 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT
    
    # 7. MultiPorts (Allow incoming SSH, HTTP, and HTTPS)
    iptables -A INPUT -i eth0 -p tcp -m multiport --dports 22,80,443 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp -m multiport --sports 22,80,443 -m state --state ESTABLISHED -j ACCEPT
    
    # 8. Allow outgoing SSH
    iptables -A OUTPUT -o eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A INPUT -i eth0 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
    
    # 9. Allow outgoing SSH only to a specific network
    #iptables -A OUTPUT -o eth0 -p tcp -d 192.168.101.0/24 --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
    #iptables -A INPUT -i eth0 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
    
    # 10. Allow outgoing HTTPS
    iptables -A OUTPUT -o eth0 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A INPUT -i eth0 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT
    
    # 11. Load balance incoming HTTPS traffic
    #iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 0 -j DNAT --to-destination 192.168.1.101:443
    #iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 1 -j DNAT --to-destination 192.168.1.102:443
    #iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 2 -j DNAT --to-destination 192.168.1.103:443
    
    # 12. Ping from inside to outside
    iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT
    iptables -A INPUT -p icmp --icmp-type echo-reply -j ACCEPT
    
    # 13. Ping from outside to inside
    iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
    iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
    
    # 14. Allow loopback access
    iptables -A INPUT -i lo -j ACCEPT
    iptables -A OUTPUT -o lo -j ACCEPT
    
    # 15. Allow packets from internal network to reach external network.
    # if eth1 is connected to external network (internet)
    # if eth0 is connected to internal network (192.168.1.x)
    iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT
    
    # 16. Allow outbound DNS
    #iptables -A OUTPUT -p udp -o eth0 --dport 53 -j ACCEPT
    #iptables -A INPUT -p udp -i eth0 --sport 53 -j ACCEPT
    
    # 17. Allow NIS Connections
    # rpcinfo -p | grep ypbind ; This port is 853 and 850
    #iptables -A INPUT -p tcp --dport 111 -j ACCEPT
    #iptables -A INPUT -p udp --dport 111 -j ACCEPT
    #iptables -A INPUT -p tcp --dport 853 -j ACCEPT
    #iptables -A INPUT -p udp --dport 853 -j ACCEPT
    #iptables -A INPUT -p tcp --dport 850 -j ACCEPT
    #iptables -A INPUT -p udp --dport 850 -j ACCEPT
    
    # 18. Allow rsync from a specific network
    iptables -A INPUT -i eth0 -p tcp -s 192.168.101.0/24 --dport 873 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp --sport 873 -m state --state ESTABLISHED -j ACCEPT
    
    # 19. Allow MySQL connection only from a specific network
    iptables -A INPUT -i eth0 -p tcp -s 192.168.200.0/24 --dport 3306 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp --sport 3306 -m state --state ESTABLISHED -j ACCEPT
    
    # 20. Allow Sendmail or Postfix
    iptables -A INPUT -i eth0 -p tcp --dport 25 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp --sport 25 -m state --state ESTABLISHED -j ACCEPT
    
    # 21. Allow IMAP and IMAPS
    iptables -A INPUT -i eth0 -p tcp --dport 143 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp --sport 143 -m state --state ESTABLISHED -j ACCEPT
    
    iptables -A INPUT -i eth0 -p tcp --dport 993 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp --sport 993 -m state --state ESTABLISHED -j ACCEPT
    
    # 22. Allow POP3 and POP3S
    iptables -A INPUT -i eth0 -p tcp --dport 110 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp --sport 110 -m state --state ESTABLISHED -j ACCEPT
    
    iptables -A INPUT -i eth0 -p tcp --dport 995 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp --sport 995 -m state --state ESTABLISHED -j ACCEPT
    
    # 23. Prevent DoS attack
    iptables -A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT
    
    # 24. Port forwarding 422 to 22
    iptables -t nat -A PREROUTING -p tcp -d 192.168.102.37 --dport 422 -j DNAT --to 192.168.102.37:22
    iptables -A INPUT -i eth0 -p tcp --dport 422 -m state --state NEW,ESTABLISHED -j ACCEPT
    iptables -A OUTPUT -o eth0 -p tcp --sport 422 -m state --state ESTABLISHED -j ACCEPT
    
    # 25. Log dropped packets
    iptables -N LOGGING
    iptables -A INPUT -j LOGGING
    iptables -A LOGGING -m limit --limit 2/min -j LOG --log-prefix "IPTables Packet Dropped: " --log-level 7
    iptables -A LOGGING -j DROP


  • This is a linux command line reference for common operations 1 of 2 post’s

      This information was taking from http://www.pixelbeat.org .. Feel free to visit this site for more info!
    Command Description
    apropos whatis Show commands pertinent to string. See also threadsafe
    man -t ascii | ps2pdf – > ascii.pdf make a pdf of a manual page
    which command Show full path name of command
    time command See how long a command takes
    time cat Start stopwatch. Ctrl-d to stop. See also sw
    dir navigation
    cd – Go to previous directory
    cd Go to $HOME directory
    (cd dir && command) Go to dir, execute command and return to current dir
    pushd . Put current dir on stack so you can popd back to it
    alias l=’ls -l –color=auto’ quick dir listing. See also l
    ls -lrt List files by date. See also newest and find_mm_yyyy
    ls /usr/bin | pr -T9 -W$COLUMNS Print in 9 columns to width of terminal
    find -name ‘*.[ch]’ | xargs grep -E ‘expr’ Search ‘expr’ in this dir and below. See also findrepo
    find -type f -print0 | xargs -r0 grep -F ‘example’ Search all regular files for ‘example’ in this dir and below
    find -maxdepth 1 -type f | xargs grep -F ‘example’ Search all regular files for ‘example’ in this dir
    find -maxdepth 1 -type d | while read dir; do echo $dir; echo cmd2; done Process each item with multiple commands (in while loop)
    find -type f ! -perm -444 Find files not readable by all (useful for web site)
    find -type d ! -perm -111 Find dirs not accessible by all (useful for web site)
    locate -r ‘file[^/]*\.txt’ Search cached index for names. This re is like glob *file*.txt
    look reference Quickly search (sorted) dictionary for prefix
    grep –color reference /usr/share/dict/words Highlight occurances of regular expression in dictionary
    archives and compression
    gpg -c file Encrypt file
    gpg file.gpg Decrypt file
    tar -c dir/ | bzip2 > dir.tar.bz2 Make compressed archive of dir/
    bzip2 -dc dir.tar.bz2 | tar -x Extract archive (use gzip instead of bzip2 for tar.gz files)
    tar -c dir/ | gzip | gpg -c | ssh user@remote ‘dd of=dir.tar.gz.gpg’ Make encrypted archive of dir/ on remote machine
    find dir/ -name ‘*.txt’ | tar -c –files-from=- | bzip2 > dir_txt.tar.bz2 Make archive of subset of dir/ and below
    find dir/ -name ‘*.txt’ | xargs cp -a –target-directory=dir_txt/ –parents Make copy of subset of dir/ and below
    ( tar -c /dir/to/copy ) | ( cd /where/to/ && tar -x -p ) Copy (with permissions) copy/ dir to /where/to/ dir
    ( cd /dir/to/copy && tar -c . ) | ( cd /where/to/ && tar -x -p ) Copy (with permissions) contents of copy/ dir to /where/to/
    ( tar -c /dir/to/copy ) | ssh -C user@remote ‘cd /where/to/ && tar -x -p’ Copy (with permissions) copy/ dir to remote:/where/to/ dir
    dd bs=1M if=/dev/sda | gzip | ssh user@remote ‘dd of=sda.gz’ Backup harddisk to remote machine
    rsync (Network efficient file copier: Use the –dry-run option for testing)
    rsync -P rsync://rsync.server.com/path/to/file file Only get diffs. Do multiple times for troublesome downloads
    rsync –bwlimit=1000 fromfile tofile Locally copy with rate limit. It’s like nice for I/O
    rsync -az -e ssh –delete ~/public_html/ remote.com:’~/public_html’ Mirror web site (using compression and encryption)
    rsync -auz -e ssh remote:/dir/ . && rsync -auz -e ssh . remote:/dir/ Synchronize current directory with remote one
    ssh (Secure SHell)
    ssh $USER@$HOST command Run command on $HOST as $USER (default command=shell)
    ssh -f -Y $USER@$HOSTNAME xeyes Run GUI command on $HOSTNAME as $USER
    scp -p -r $USER@$HOST: file dir/ Copy with permissions to $USER’s home directory on $HOST
    scp -c arcfour $USER@$LANHOST: bigfile Use faster crypto for local LAN. This might saturate GigE
    ssh -g -L 8080:localhost:80 root@$HOST Forward connections to $HOSTNAME:8080 out to $HOST:80
    ssh -R 1434:imap:143 root@$HOST Forward connections from $HOST:1434 in to imap:143
    ssh-copy-id $USER@$HOST Install public key for $USER@$HOST for password-less log in
    wget (multi purpose download tool)
    (cd dir/ && wget -nd -pHEKk http://www.pixelbeat.org/cmdline.html) Store local browsable version of a page to the current dir
    wget -c http://www.example.com/large.file Continue downloading a partially downloaded file
    wget -r -nd -np -l1 -A ‘*.jpg’ http://www.example.com/dir/ Download a set of files to the current directory
    wget ftp://remote/file[1-9].iso/ FTP supports globbing directly
    wget -q -O- http://www.pixelbeat.org/timeline.html | grep ‘a href’ | head Process output directly
    echo ‘wget url’ | at 01:00 Download url at 1AM to current dir
    wget –limit-rate=20k url Do a low priority download (limit to 20KB/s in this case)
    wget -nv –spider –force-html -i bookmarks.html Check links in a file
    wget –mirror http://www.example.com/ Efficiently update a local copy of a site (handy from cron)
    networking (Note ifconfig, route, mii-tool, nslookup commands are obsolete)
    ethtool eth0 Show status of ethernet interface eth0
    ethtool –change eth0 autoneg off speed 100 duplex full Manually set ethernet interface speed
    iw dev wlan0 link Show link status of wireless interface wlan0
    iw dev wlan0 set bitrates legacy-2.4 1 Manually set wireless interface speed
    iw dev wlan0 scan List wireless networks in range
    ip link show List network interfaces
    ip link set dev eth0 name wan Rename interface eth0 to wan
    ip link set dev eth0 up Bring interface eth0 up (or down)
    ip addr show List addresses for interfaces
    ip addr add 1.2.3.4/24 brd + dev eth0 Add (or del) ip and mask (255.255.255.0)
    ip route show List routing table
    ip route add default via 1.2.3.254 Set default gateway to 1.2.3.254
    ss -tupl List internet services on a system
    ss -tup List active connections to/from system
    host pixelbeat.org Lookup DNS ip address for name or vice versa
    hostname -i Lookup local ip address (equivalent to host `hostname`)
    whois pixelbeat.org Lookup whois info for hostname or ip address
    windows networking (Note samba is the package that provides all this windows specific networking support)
    smbtree Find windows machines. See also findsmb
    nmblookup -A 1.2.3.4 Find the windows (netbios) name associated with ip address
    smbclient -L windows_box List shares on windows machine or samba server
    mount -t smbfs -o fmask=666,guest //windows_box/share /mnt/share Mount a windows share
    echo ‘message’ | smbclient -M windows_box Send popup to windows machine (off by default in XP sp2)
    text manipulation (Note sed uses stdin and stdout. Newer versions support inplace editing with the -i option)
    sed ‘s/string1/string2/g’ Replace string1 with string2
    sed ‘s/\(.*\)1/\12/g’ Modify anystring1 to anystring2
    sed ‘/^ *#/d; /^ *$/d’ Remove comments and blank lines
    sed ‘:a; /\\$/N; s/\\\n//; ta’ Concatenate lines with trailing \
    sed ‘s/[ \t]*$//’ Remove trailing spaces from lines
    sed ‘s/\([`”$\]\)/\\\1/g’ Escape shell metacharacters active within double quotes
    seq 10 | sed “s/^/      /; s/ *\(.\{7,\}\)/\1/” Right align numbers
    seq 10 | sed p | paste – – Duplicate a column
    sed -n ‘1000{p;q}’ Print 1000th line
    sed -n ‘10,20p;20q Print lines 10 to 20
    sed -n ‘s/.*<title>\(.*\)<\/title>.*/\1/ip;T;q Extract title from HTML web page
    sed -i 42d ~/.ssh/known_hosts Delete a particular line
    sort -t. -k1,1n -k2,2n -k3,3n -k4,4n Sort IPV4 ip addresses
    echo ‘Test’ | tr ‘[:lower:]’ ‘[:upper:]’ Case conversion
    tr -dc ‘[:print:]’ < /dev/urandom Filter non printable characters
    tr -s ‘[:blank:]’ ‘\t’ </proc/diskstats | cut -f4 cut fields separated by blanks
    history | wc -l Count lines
    seq 10 | paste -s -d ‘ ‘ Concatenate and separate line items to a single line
    set operations (Note you can export LANG=C for speed. Also these assume no duplicate lines within a file)
    sort file1 file2 | uniq Union of unsorted files
    sort file1 file2 | uniq -d Intersection of unsorted files
    sort file1 file1 file2 | uniq -u Difference of unsorted files
    sort file1 file2 | uniq -u Symmetric Difference of unsorted files
    join -t’\0′ -a1 -a2 file1 file2 Union of sorted files
    join -t’\0′ file1 file2 Intersection of sorted files
    join -t’\0′ -v2 file1 file2 Difference of sorted files
    join -t’\0′ -v1 -v2 file1 file2 Symmetric Difference of sorted files
    math
    echo ‘(1 + sqrt(5))/2′ | bc -l Quick math (Calculate φ). See also bc
    seq -f ‘4/%g’ 1 2 99999 | paste -sd-+ | bc -l Calculate π the unix way
    echo ‘pad=20; min=64; (100*10^6)/((pad+min)*8)’ | bc More complex (int) e.g. This shows max FastE packet rate
    echo ‘pad=20; min=64; print (100E6)/((pad+min)*8)’ | python Python handles scientific notation
    echo ‘pad=20; plot [64:1518] (100*10**6)/((pad+x)*8)’ | gnuplot -persist Plot FastE packet rate vs packet size
    echo ‘obase=16; ibase=10; 64206′ | bc Base conversion (decimal to hexadecimal)
    echo $((0x2dec)) Base conversion (hex to dec) ((shell arithmetic expansion))
    units -t ‘100m/9.58s‘ ‘miles/hour’ Unit conversion (metric to imperial)
    units -t ‘500GB’ ‘GiB’ Unit conversion (SI to IEC prefixes)
    units -t ‘1 googol’ Definition lookup
    seq 100 | paste -s -d+ | bc Add a column of numbers. See also add and funcpy
    calendar
    cal -3 Display a calendar
    cal 9 1752 Display a calendar for a particular month year
    date -d fri What date is it this friday. See also day
    [ $(date -d ’12:00 +1 day’ +%d) = ’01’ ] || exit exit a script unless it’s the last day of the month
    date –date=’25 Dec’ +%A What day does xmas fall on, this year
    date –date=’@2147483647′ Convert seconds since the epoch (1970-01-01 UTC) to date
    TZ=’America/Los_Angeles’ date What time is it on west coast of US (use tzselect to find TZ)
    date –date=’TZ=”America/Los_Angeles” 09:00 next Fri’ What’s the local time for 9AM next Friday on west coast US
    locales
    printf “%’d\n” 1234 Print number with thousands grouping appropriate to locale
    BLOCK_SIZE=\’1 ls -l Use locale thousands grouping in ls. See also l
    echo “I live in `locale territory`” Extract info from locale database
    LANG=en_IE.utf8 locale int_prefix Lookup locale info for specific country. See also ccodes
    locale -kc $(locale | sed -n ‘s/\(LC_.\{4,\}\)=.*/\1/p’) | less List fields available in locale database
    recode (Obsoletes iconv, dos2unix, unix2dos)
    recode -l | less Show available conversions (aliases on each line)
    recode windows-1252.. file_to_change.txt Windows “ansi” to local charset (auto does CRLF conversion)
    recode utf-8/CRLF.. file_to_change.txt Windows utf8 to local charset
    recode iso-8859-15..utf8 file_to_change.txt Latin9 (western europe) to utf8
    recode ../b64 < file.txt > file.b64 Base64 encode
    recode /qp.. < file.qp > file.txt Quoted printable decode
    recode ..HTML < file.txt > file.html Text to HTML
    recode -lf windows-1252 | grep euro Lookup table of characters
    echo -n 0x80 | recode latin-9/x1..dump Show what a code represents in latin-9 charmap
    echo -n 0x20AC | recode ucs-2/x2..latin-9/x Show latin-9 encoding
    echo -n 0x20AC | recode ucs-2/x2..utf-8/x Show utf-8 encoding
    CDs
    gzip < /dev/cdrom > cdrom.iso.gz Save copy of data cdrom
    mkisofs -V LABEL -r dir | gzip > cdrom.iso.gz Create cdrom image from contents of dir
    mount -o loop cdrom.iso /mnt/dir Mount the cdrom image at /mnt/dir (read only)
    wodim dev=/dev/cdrom blank=fast Clear a CDRW
    gzip -dc cdrom.iso.gz | wodim -tao dev=/dev/cdrom -v -data – Burn cdrom image (use –prcap to confirm dev)
    cdparanoia -B Rip audio tracks from CD to wav files in current dir
    wodim -v dev=/dev/cdrom -audio -pad *.wav Make audio CD from all wavs in current dir (see also cdrdao)
    oggenc –tracknum=$track track.cdda.wav -o track.ogg Make ogg file from wav file
    disk space (See also FSlint)
    ls -lSr Show files by size, biggest last
    du -s * | sort -k1,1rn | head Show top disk users in current dir. See also dutop
    du -hs /home/* | sort -k1,1h Sort paths by easy to interpret disk usage
    df -h Show free space on mounted filesystems
    df -i Show free inodes on mounted filesystems
    fdisk -l Show disks partitions sizes and types (run as root)
    rpm -q -a –qf ‘%10{SIZE}\t%{NAME}\n’ | sort -k1,1n List all packages by installed size (Bytes) on rpm distros
    dpkg-query -W -f=’${Installed-Size;10}\t${Package}\n’ | sort -k1,1n List all packages by installed size (KBytes) on deb distros
    dd bs=1 seek=2TB if=/dev/null of=ext3.test Create a large test file (taking no space). See also truncate
    > file truncate data of file or create an empty file
    monitoring/debugging
    tail -f /var/log/messages Monitor messages in a log file
    strace -c ls >/dev/null Summarise/profile system calls made by command
    strace -f -e open ls >/dev/null List system calls made by command
    strace -f -e trace=write -e write=1,2 ls >/dev/null Monitor what’s written to stdout and stderr
    ltrace -f -e getenv ls >/dev/null List library calls made by command
    lsof -p $$ List paths that process id has open
    lsof ~ List processes that have specified path open
    tcpdump not port 22 Show network traffic except ssh. See also tcpdump_not_me
    ps -e -o pid,args –forest List processes in a hierarchy
    ps -e -o pcpu,cpu,nice,state,cputime,args –sort pcpu | sed ‘/^ 0.0 /d’ List processes by % cpu usage
    ps -e -orss=,args= | sort -b -k1,1n | pr -TW$COLUMNS List processes by mem (KB) usage. See also ps_mem.py
    ps -C firefox-bin -L -o pid,tid,pcpu,state List all threads for a particular process
    ps -p 1,$$ -o etime= List elapsed wall time for particular process IDs
    last reboot Show system reboot history
    free -m Show amount of (remaining) RAM (-m displays in MB)
    watch -n.1 ‘cat /proc/interrupts’ Watch changeable data continuously
    udevadm monitor Monitor udev events to help configure rules
    system information (see also sysinfo) (‘#’ means root access is required)
    uname -a Show kernel version and system architecture
    head -n1 /etc/issue Show name and version of distribution
    cat /proc/partitions Show all partitions registered on the system
    grep MemTotal /proc/meminfo Show RAM total seen by the system
    grep “model name” /proc/cpuinfo Show CPU(s) info
    lspci -tv Show PCI info
    lsusb -tv Show USB info
    mount | column -t List mounted filesystems on the system (and align output)
    grep -F capacity: /proc/acpi/battery/BAT0/info Show state of cells in laptop battery
    # dmidecode -q | less Display SMBIOS/DMI information
    # smartctl -A /dev/sda | grep Power_On_Hours How long has this disk (system) been powered on in total
    # hdparm -i /dev/sda Show info about disk sda
    # hdparm -tT /dev/sda Do a read speed test on disk sda
    # badblocks -s /dev/sda Test for unreadable blocks on disk sda
    interactive (see also linux keyboard shortcuts)
    readline Line editor used by bash, python, bc, gnuplot, …
    screen Virtual terminals with detach capability, …
    mc Powerful file manager that can browse rpm, tar, ftp, ssh, …
    gnuplot Interactive/scriptable graphing
    links Web browser
    xdg-open . open a file or url with the registered desktop application


  • This is a linux command line reference for common operations 2 of 2 post’s

    Command Description
    grep . /proc/sys/net/ipv4/* List the contents of flag files
    set | grep $USER Search current environment
    tr ‘\0′ ‘\n’ < /proc/$$/environ Display the startup environment for any process
    echo $PATH | tr : ‘\n’ Display the $PATH one per line
    kill -0 $$ && echo process exists and can accept signals Check for the existence of a process (pid)
    find /etc -readable | xargs less -K -p’*ntp‘ -j $((${LINES:-25}/2)) Search paths and data with full context. Use n to iterate
    namei -l ~/.ssh Output attributes for all directories leading to a file name
    Low impact admin
    # apt-get install “package” -o Acquire::http::Dl-Limit=42 \
    -o Acquire::Queue-mode=access
    Rate limit apt-get to 42KB/s
    echo ‘wget url’ | at 01:00 Download url at 1AM to current dir
    # apache2ctl configtest && apache2ctl graceful Restart apache if config is OK
    nice openssl speed sha1 Run a low priority command (openssl benchmark)
    chrt -i 0 openssl speed sha1 Run a low priority command (more effective than nice)
    renice 19 -p $$; ionice -c3 -p $$ Make shell (script) low priority. Use for non interactive tasks
    Interactive monitoring
    watch -t -n1 uptime Clock with system load
    htop -d 5 Better top (scrollable, tree view, lsof/strace integration, …)
    iotop What’s doing I/O
    # watch -d -n30 “nice ps_mem.py | tail -n $((${LINES:-12}-2))” What’s using RAM
    # iftop What’s using the network. See also iptraf
    # mtr www.pixelbeat.org ping and traceroute combined
    Useful utilities
    pv < /dev/zero > /dev/null Progress Viewer for data copying from files and pipes
    wkhtml2pdf http://…/linux_commands.html linux_commands.pdf Make a pdf of a web page
    timeout 1 sleep inf run a command with bounded time. See also timeout
    Networking
    python -m SimpleHTTPServer Serve current directory tree at http://$HOSTNAME:8000/
    openssl s_client -connect www.google.com:443 </dev/null 2>&0 |
    openssl x509 -dates -noout
    Display the date range for a site’s certs
    curl -I www.pixelbeat.org Display the server headers for a web site
    # lsof -i tcp:80 What’s using port 80
    # httpd -S Display a list of apache virtual hosts
    vim scp://user@remote//path/to/file Edit remote file using local vim. Good for high latency links
    curl -s http://www.pixelbeat.org/pixelbeat.asc | gpg –import Import a gpg key from the web
    tc qdisc add dev lo root handle 1:0 netem delay 20msec Add 20ms latency to loopback device (for testing)
    tc qdisc del dev lo root Remove latency added above
    Notification
    echo “DISPLAY=$DISPLAY xmessage cooker” | at “NOW +30min” Popup reminder
    notify-send “subject” “message” Display a gnome popup notification
    echo “mail -s ‘go home’ P@draigBrady.com < /dev/null” | at 17:30 Email reminder
    uuencode file name | mail -s subject P@draigBrady.com Send a file via email
    ansi2html.sh | mail -a “Content-Type: text/html” P@draigBrady.com Send/Generate HTML email
    Better default settings (useful in your .bashrc)
    # tail -s.1 -f /var/log/messages Display file additions more responsively
    seq 100 | tail -n $((${LINES:-12}-2)) Display as many lines as possible without scrolling
    # tcpdump -s0 Capture full network packets
    Useful functions/aliases (useful in your .bashrc)
    md () { mkdir -p “$1″ && cd “$1″; } Change to a new directory
    strerror() { python -c “import os; print os.strerror($1)”; } Display the meaning of an errno
    plot() { { echo ‘plot “-“‘ “$@”; cat; } | gnuplot -persist; } Plot stdin. (e.g: • seq 1000 | sed ‘s/.*/s(&)/’ | bc -l | plot)
    hili() { e=”$1″; shift; grep –col=always -Eih “$e|$” “$@”; } highlight occurences of expr. (e.g: • env | hili $USER)
    alias hd=’od -Ax -tx1z -v’ Hexdump. (usage e.g.: • hd /proc/self/cmdline | less)
    alias realpath=’readlink -f’ Canonicalize path. (usage e.g.: • realpath ~/../$USER)
    ord() { printf “0x%x\n” “‘$1″; } shell version of the ord() function
    chr() { printf $(printf ‘\\%03o\\n’ “$1″); } shell version of the chr() function
    Multimedia
    DISPLAY=:0.0 import -window root orig.png Take a (remote) screenshot
    convert -filter catrom –resize ‘600x>’ orig.png 600px_wide.png Shrink to width, computer gen images or screenshots
    mplayer -ao pcm -vo null -vc dummy /tmp/Flash* Extract audio from flash video to audiodump.wav
    ffmpeg -i filename.avi Display info about multimedia file
    ffmpeg -f x11grab -s xga -r 25 -i :0 -sameq demo.mpg Capture video of an X display
    DVD
    for i in $(seq 9); do ffmpeg -i $i.avi -target pal-dvd $i.mpg; done Convert video to the correct encoding and aspect for DVD
    dvdauthor -odvd -t -v “pal,4:3,720xfull” *.mpg;dvdauthor -odvd -T Build DVD file system. Use 16:9 for widescreen input
    growisofs -dvd-compat -Z /dev/dvd -dvd-video dvd Burn DVD file system to disc
    Unicode
    python -c “import unicodedata as u; print u.name(unichr(0x2028))” Lookup a unicode character
    uconv -f utf8 -t utf8 -x nfc Normalize combining characters
    printf ‘\300\200′ | iconv -futf8 -tutf8 >/dev/null Validate UTF-8
    printf ‘ŨTF8\n’ | LANG=C grep –color=always ‘[^ -~]\+’ Highlight non printable ASCII chars in UTF-8
    fc-match -s “sans:lang=zh” List font match order for language and style
    Development
    gcc -march=native -E -v -</dev/null 2>&1|sed -n ‘s/.*-mar/-mar/p’ Show autodetected gcc tuning params. See also gcccpuopt
    for i in $(seq 4); do { [ $i = 1 ] && wget http://url.ie/6lko -qO-||
    ./a.out; } | tee /dev/tty | gcc -xc – 2>/dev/null; done
    Compile and execute C code from stdin
    cpp -dM /dev/null Show all predefined macros
    echo “#include <features.h>” | cpp -dN | grep “#define __USE_” Show all glibc feature macros
    gdb -tui Debug showing source code context in separate windows
    udev
    udevadm info -a -p $(udevadm info -q path -n /dev/input/mouse0) List udev attributes of a device, for matching rules etc.
    udevadm test /sys/class/input/mouse0 See how udev rules are applied for a device
    # udevadm control –reload-rules Reload udev rules after modification
    Extended Attributes (Note you may need to (re)mount with “acl” or “user_xattr” options)
    getfacl . Show ACLs for file
    setfacl -m u:nobody:r . Allow a specific user to read file
    setfacl -x u:nobody . Delete a specific user’s rights to file
    setfacl –default -m group:users:rw- dir/ Set umask for a for a specific dir
    getcap file Show capabilities for a program
    setcap cap_net_raw+ep your_gtk_prog Allow gtk program raw access to network
    stat -c%C . Show SELinux context for file
    chcon … file Set SELinux context for file (see also restorecon)
    getfattr -m- -d . Show all extended attributes (includes selinux,acls,…)
    setfattr -n “user.foo” -v “bar” . Set arbitrary user attributes
    BASH specific
    echo 123 | tee >(tr 1 a) | tr 1 b Split data to 2 commands (using process substitution)
    meld local_file <(ssh host cat remote_file) Compare a local and remote file (using process substitution)
    Multicore
    taskset -c 0 nproc Restrict a command to certain processors
    find -type f -print0 | xargs -r0 -P$(nproc) -n10 md5sum Process files in parallel over available processors
    sort -m <(sort data1) <(sort data2) >data.sorted Sort separate data files over 2 processors

    Continue reading  Post ID 75



  • TCP Ports list (3498 ports in list)

    1 tcpmux TCP Port Service Multiplexer
    2 compressnet Management Utility
    3 compressnet Compression Process
    5 rje Remote Job Entry
    7 echo Echo
    9 discard Discard
    11 systat Active Users
    13 daytime Daytime (RFC 867)
    15 netstat netstat 15/tcp
    17 qotd Quote of the Day
    18 msp Message Send Protocol
    19 chargen Character Generator
    20 ftp-data File Transfer [Default Data]
    21 ftp File Transfer [Control]
    22 ssh SSH Remote Login Protocol
    23 telnet Telnet
    24 priv-mail any private mail system
    25 smtp Simple Mail Transfer
    27 nsw-fe NSW User System FE
    29 msg-icp MSG ICP
    31 msg-auth MSG Authentication
    33 dsp Display Support Protocol
    35 priv-print any private printer server
    37 time Time
    38 rap Route Access Protocol
    39 rlp Resource Location Protocol
    41 graphics Graphics
    42 name Host Name Server
    43 nicname Who Is
    44 mpm-flags MPM FLAGS Protocol
    45 mpm Message Processing Module [recv]
    46 mpm-snd MPM [default send]
    47 ni-ftp NI FTP
    48 auditd Digital Audit Daemon
    49 tacacs Login Host Protocol (TACACS)
    50 re-mail-ck Remote Mail Checking Protocol
    51 la-maint IMP Logical Address Maintenance
    52 xns-time XNS Time Protocol
    53 domain Domain Name Server
    54 xns-ch XNS Clearinghouse
    55 isi-gl ISI Graphics Language
    56 xns-auth XNS Authentication
    57 mtp any private terminal access, deprecated
    58 xns-mail XNS Mail
    59 priv-file any private file service
    61 ni-mail NI MAIL
    62 acas ACA Services
    63 whois++ whois++
    64 covia Communications Integrator (CI)
    65 tacacs-ds TACACS-Database Service
    66 sql*net Oracle SQL*NET
    67 bootps Bootstrap Protocol Server
    68 bootpc Bootstrap Protocol Client
    69 tftp Trivial File Transfer
    70 gopher Gopher
    71 netrjs-1 Remote Job Service
    72 netrjs-2 Remote Job Service
    73 netrjs-3 Remote Job Service
    74 netrjs-4 Remote Job Service
    75 priv-dial any private dial out service
    76 deos Distributed External Object Store
    77 rje any private rje service, netrjs
    78 vettcp vettcp
    79 finger Finger
    80 http World Wide Web HTTP
    81 hosts2-ns HOSTS2 Name Server
    82 xfer XFER Utility
    83 mit-ml-dev MIT ML Device
    84 ctf Common Trace Facility
    85 mit-ml-dev MIT ML Device
    86 mfcobol Micro Focus Cobol
    87 link any private terminal link, ttylink
    88 kerberos Kerberos
    89 su-mit-tg SU/MIT Telnet Gateway
    90 dnsix DNSIX Securit Attribute Token Map
    91 mit-dov MIT Dover Spooler
    92 npp Network Printing Protocol
    93 dcp Device Control Protocol
    94 objcall Tivoli Object Dispatcher
    95 supdup SUPDUP
    96 dixie DIXIE Protocol Specification
    97 swift-rvf Swift Remote Virtural File Protocol
    98 tacnews TAC News
    99 metagram Metagram Relay
    100 newacct [unauthorized use]
    101 hostname NIC Host Name Server
    102 iso-tsap ISO-TSAP Class 0
    103 gppitnp Genesis Point-to-Point Trans Net
    104 acr-nema ACR-NEMA Digital Imag. & Comm. 300
    105 csnet-ns Mailbox Name Nameserver
    106 3com-tsmux 3COM-TSMUX
    107 rtelnet Remote Telnet Service
    108 snagas SNA Gateway Access Server
    109 pop2 Post Office Protocol – Version 2
    110 pop3 Post Office Protocol – Version 3
    111 sunrpc SUN Remote Procedure Call
    112 mcidas McIDAS Data Transmission Protocol
    113 auth Authentication Service
    114 audionews Audio News Multicast
    115 sftp Simple File Transfer Protocol
    116 ansanotify ANSA REX Notify
    117 uucp-path UUCP Path Service
    118 sqlserv SQL Services
    119 nntp Network News Transfer Protocol
    120 cfdptkt CFDPTKT
    121 erpc Encore Expedited Remote Pro.Call
    122 smakynet SMAKYNET
    123 ntp Network Time Protocol
    124 ansatrader ANSA REX Trader
    125 locus-map Locus PC-Interface Net Map Ser
    126 nxedit NXEdit
    127 locus-con Locus PC-Interface Conn Server
    128 gss-xlicen GSS X License Verification
    129 pwdgen Password Generator Protocol
    130 cisco-fna cisco FNATIVE
    131 cisco-tna cisco TNATIVE
    132 cisco-sys cisco SYSMAINT
    133 statsrv Statistics Service
    134 ingres-net INGRES-NET Service
    135 epmap DCE endpoint resolution
    136 profile PROFILE Naming System
    137 netbios-ns NETBIOS Name Service
    138 netbios-dgm NETBIOS Datagram Service
    139 netbios-ssn NETBIOS Session Service
    140 emfis-data EMFIS Data Service
    141 emfis-cntl EMFIS Control Service
    142 bl-idm Britton-Lee IDM
    143 imap Internet Message Access Protocol
    144 uma Universal Management Architecture
    145 uaac UAAC Protocol
    146 iso-tp0 ISO-IP0
    147 iso-ip ISO-IP
    148 jargon Jargon
    149 aed-512 AED 512 Emulation Service
    150 sql-net SQL-NET
    151 hems HEMS
    152 bftp Background File Transfer Program
    153 sgmp SGMP
    154 netsc-prod NETSC
    155 netsc-dev NETSC
    156 sqlsrv SQL Service
    157 knet-cmp KNET/VM Command/Message Protocol
    158 pcmail-srv PCMail Server
    159 nss-routing NSS-Routing
    160 sgmp-traps SGMP-TRAPS
    161 snmp SNMP
    162 snmptrap SNMPTRAP
    163 cmip-man CMIP/TCP Manager
    164 cmip-agent CMIP/TCP Agent
    165 xns-courier Xerox
    166 s-net Sirius Systems
    167 namp NAMP
    168 rsvd RSVD
    169 send SEND
    170 print-srv Network PostScript
    171 multiplex Network Innovations Multiplex
    172 cl/1 Network Innovations CL/1
    173 xyplex-mux Xyplex
    174 mailq MAILQ
    175 vmnet VMNET
    176 genrad-mux GENRAD-MUX
    177 xdmcp X Display Manager Control Protocol
    178 nextstep NextStep Window Server
    179 bgp Border Gateway Protocol
    180 ris Intergraph
    181 unify Unify
    182 audit Unisys Audit SITP
    183 ocbinder OCBinder
    184 ocserver OCServer
    185 remote-kis Remote-KIS
    186 kis KIS Protocol
    187 aci Application Communication Interface
    188 mumps Plus Five’s MUMPS
    189 qft Queued File Transport
    190 gacp Gateway Access Control Protocol
    191 prospero Prospero Directory Service
    192 osu-nms OSU Network Monitoring System
    193 srmp Spider Remote Monitoring Protocol
    194 irc Internet Relay Chat Protocol
    195 dn6-nlm-aud DNSIX Network Level Module Audit
    196 dn6-smm-red DNSIX Session Mgt Module Audit Redir
    197 dls Directory Location Service
    198 dls-mon Directory Location Service Monitor
    199 smux SMUX
    200 src IBM System Resource Controller
    201 at-rtmp AppleTalk Routing Maintenance
    202 at-nbp AppleTalk Name Binding
    203 at-3 AppleTalk Unused
    204 at-echo AppleTalk Echo
    205 at-5 AppleTalk Unused
    206 at-zis AppleTalk Zone Information
    207 at-7 AppleTalk Unused
    208 at-8 AppleTalk Unused
    209 qmtp The Quick Mail Transfer Protocol
    210 z39.50 ANSI Z39.50
    211 914c/g Texas Instruments 914C/G Terminal
    212 anet ATEXSSTR
    213 ipx IPX
    214 vmpwscs VM PWSCS
    215 softpc Insignia Solutions
    216 CAIlic Computer Associates Int’l License Server
    217 dbase dBASE Unix
    218 mpp Netix Message Posting Protocol
    219 uarps Unisys ARPs
    220 imap3 Interactive Mail Access Protocol v3
    221 fln-spx Berkeley rlogind with SPX auth
    222 rsh-spx Berkeley rshd with SPX auth
    223 cdc Certificate Distribution Center
    224 masqdialer masqdialer
    242 direct Direct
    243 sur-meas Survey Measurement
    244 inbusiness inbusiness
    245 link LINK
    246 dsp3270 Display Systems Protocol
    247 subntbcst_tftp SUBNTBCST_TFTP
    248 bhfhs bhfhs
    256 rap RAP
    257 set Secure Electronic Transaction
    258 yak-chat Yak Winsock Personal Chat
    259 esro-gen Efficient Short Remote Operations
    260 openport Openport
    261 nsiiops IIOP Name Service over TLS/SSL
    262 arcisdms Arcisdms
    263 hdap HDAP
    264 bgmp BGMP
    265 x-bone-ctl X-Bone CTL
    266 sst SCSI on ST
    267 td-service Tobit David Service Layer
    268 td-replica Tobit David Replica
    280 http-mgmt http-mgmt
    281 personal-link Personal Link
    282 cableport-ax Cable Port A/X
    283 rescap rescap
    284 corerjd corerjd
    285 gtp-user gtp-user plane (3gpp)
    286 fxp-1 FXP-1
    287 k-block K-BLOCK
    308 novastorbakcup Novastor Backup
    309 entrusttime EntrustTime
    310 bhmds bhmds
    311 asip-webadmin AppleShare IP WebAdmin
    312 vslmp VSLMP
    313 magenta-logic Magenta Logic
    314 opalis-robot Opalis Robot
    315 dpsi DPSI
    316 decauth decAuth
    317 zannet Zannet
    318 pkix-timestamp PKIX TimeStamp
    319 ptp-event PTP Event
    320 ptp-general PTP General
    321 pip PIP
    322 rtsps RTSPS
    333 texar Texar Security Port
    344 pdap Prospero Data Access Protocol
    345 pawserv Perf Analysis Workbench
    346 zserv Zebra server
    347 fatserv Fatmen Server
    348 csi-sgwp Cabletron Management Protocol
    349 mftp mftp
    350 matip-type-a MATIP Type A
    351 bhoetty bhoetty (added 5/21/97)
    352 bhoedap4 bhoedap4 (added 5/21/97)
    353 ndsauth NDSAUTH
    354 bh611 bh611
    355 datex-asn DATEX-ASN
    356 cloanto-net-1 Cloanto Net 1
    357 bhevent bhevent
    358 shrinkwrap Shrinkwrap
    359 tenebris_nts Tenebris Network Trace Service
    360 scoi2odialog scoi2odialog
    361 semantix Semantix
    362 srssend SRS Send
    363 rsvp_tunnel RSVP Tunnel
    364 aurora-cmgr Aurora CMGR
    365 dtk DTK
    366 odmr ODMR
    367 mortgageware MortgageWare
    368 qbikgdp QbikGDP
    369 rpc2portmap rpc2portmap
    370 codaauth2 codaauth2
    371 clearcase Clearcase
    372 ulistproc ListProcessor
    373 legent-1 Legent Corporation
    374 legent-2 Legent Corporation
    375 hassle Hassle
    376 nip Amiga Envoy Network Inquiry Proto
    377 tnETOS NEC Corporation
    378 dsETOS NEC Corporation
    379 is99c TIA/EIA/IS-99 modem client
    380 is99s TIA/EIA/IS-99 modem server
    381 hp-collector hp performance data collector
    382 hp-managed-node hp performance data managed node
    383 hp-alarm-mgr hp performance data alarm manager
    384 arns A Remote Network Server System
    385 ibm-app IBM Application
    386 asa ASA Message Router Object Def.
    387 aurp Appletalk Update-Based Routing Pro.
    388 unidata-ldm Unidata LDM
    389 ldap lightweight directory access protocol
    390 uis UIS
    391 synotics-relay SynOptics SNMP Relay Port
    392 synotics-broker SynOptics Port Broker Port
    393 dis data interpretation system
    394 embl-ndt EMBL Nucleic Data Transfer
    395 netcp NETscout Control Protocol
    396 netware-ip Novell Netware over IP
    397 mptn Multi Protocol Trans. Net.
    398 kryptolan Kryptolan
    399 iso-tsap-c2 ISO Transport Class 2 Non-Control over TCP
    400 work-sol Workstation Solutions
    401 ups Uninterruptible Power Supply
    402 genie Genie Protocol
    403 decap decap
    404 nced nced
    405 ncld ncld
    406 imsp Interactive Mail Support Protocol
    407 timbuktu Timbuktu
    408 prm-sm Prospero Resource Manager Sys. Man.
    409 prm-nm Prospero Resource Manager Node Man.
    410 decladebug DECLadebug Remote Debug Protocol
    411 rmt Remote MT Protocol
    412 synoptics-trap Trap Convention Port
    413 smsp Storage Management Services Protocol
    414 infoseek InfoSeek
    415 bnet BNet
    416 silverplatter Silverplatter
    417 onmux Onmux
    418 hyper-g Hyper-G
    419 ariel1 Ariel
    420 smpte SMPTE
    421 ariel2 Ariel
    422 ariel3 Ariel
    423 opc-job-start IBM Operations Planning and Control Start
    424 opc-job-track IBM Operations Planning and Control Track
    425 icad-el ICAD
    426 smartsdp smartsdp
    427 svrloc Server Location
    428 ocs_cmu OCS_CMU
    429 ocs_amu OCS_AMU
    430 utmpsd UTMPSD
    431 utmpcd UTMPCD
    432 iasd IASD
    433 nnsp NNSP
    434 mobileip-agent MobileIP-Agent
    435 mobilip-mn MobilIP-MN
    436 dna-cml DNA-CML
    437 comscm comscm
    438 dsfgw dsfgw
    439 dasp dasp Thomas Obermair
    440 sgcp sgcp
    441 decvms-sysmgt decvms-sysmgt
    442 cvc_hostd cvc_hostd
    443 https http protocol over TLS/SSL
    444 snpp Simple Network Paging Protocol
    445 microsoft-ds Microsoft-DS
    446 ddm-rdb DDM-RDB
    447 ddm-dfm DDM-RFM
    448 ddm-ssl DDM-SSL
    449 as-servermap AS Server Mapper
    450 tserver TServer
    451 sfs-smp-net Cray Network Semaphore server
    452 sfs-config Cray SFS config server
    453 creativeserver CreativeServer
    454 contentserver ContentServer
    455 creativepartnr CreativePartnr
    456 macon-tcp macon-tcp
    457 scohelp scohelp
    458 appleqtc apple quick time
    459 ampr-rcmd ampr-rcmd
    460 skronk skronk
    461 datasurfsrv DataRampSrv
    462 datasurfsrvsec DataRampSrvSec
    463 alpes alpes
    464 kpasswd kerberos (v5), kpasswd
    465 smtps smtp protocol over tls/ssl (was ssmtp)
    466 digital-vrc digital-vrc
    467 mylex-mapd mylex-mapd
    468 photuris proturis
    469 rcp Radio Control Protocol
    470 scx-proxy scx-proxy
    471 mondex Mondex
    472 ljk-login ljk-login
    473 hybrid-pop hybrid-pop
    474 tn-tl-w1 tn-tl-w1
    475 tcpnethaspsrv tcpnethaspsrv
    476 tn-tl-fd1 tn-tl-fd1
    477 ss7ns ss7ns
    478 spsc spsc
    479 iafserver iafserver
    480 iafdbase iafdbase
    481 ph Ph service
    482 bgs-nsi bgs-nsi
    483 ulpnet ulpnet
    484 integra-sme Integra Software Management Environment
    485 powerburst Air Soft Power Burst
    486 avian avian
    487 saft saft Simple Asynchronous File Transfer
    488 gss-http gss-http
    489 nest-protocol nest-protocol
    490 micom-pfs micom-pfs
    491 go-login go-login
    492 ticf-1 Transport Independent Convergence for FNA
    493 ticf-2 Transport Independent Convergence for FNA
    494 pov-ray POV-Ray
    495 intecourier intecourier
    496 pim-rp-disc PIM-RP-DISC
    497 dantz dantz
    498 siam siam
    499 iso-ill ISO ILL Protocol
    500 isakmp isakmp
    501 stmf STMF
    502 asa-appl-proto asa-appl-proto
    503 intrinsa Intrinsa
    504 citadel citadel
    505 mailbox-lm mailbox-lm
    506 ohimsrv ohimsrv
    507 crs crs
    508 xvttp xvttp
    509 snare snare
    510 fcp FirstClass Protocol
    511 passgo PassGo
    512 exec remote execution, remote process execution;, bsd rexecd(8)
    513 login bsd rlogind(8), remote login a la telnet;, remote login
    514 shell cmd
    515 printer line printer spooler, spooler, spooler (lpd)
    516 videotex videotex
    517 talk like tenex link, but across
    519 utime unixtime
    520 efs extended file name server
    521 ripng ripng
    522 ulp ULP
    523 ibm-db2 IBM-DB2
    524 ncp NCP
    525 timed timeserver
    526 tempo newdate
    527 stx Stock IXChange
    528 custix Customer IXChange
    529 irc-serv IRC-SERV
    530 courier rpc
    531 conference chat
    532 netnews readnews
    533 netwall for emergency broadcasts
    534 mm-admin MegaMedia Admin
    535 iiop iiop
    536 opalis-rdv opalis-rdv
    537 nmsp Networked Media Streaming Protocol
    538 gdomap gdomap
    539 apertus-ldp Apertus Technologies Load Determination
    540 uucp uucpd
    541 uucp-rlogin rdist daemon, uucp-rlogin
    542 commerce commerce
    544 kshell krcmd
    545 appleqtcsrvr appleqtcsrvr
    546 dhcpv6-client DHCPv6 Client
    547 dhcpv6-server DHCPv6 Server
    548 afpovertcp AFP over TCP
    549 idfp IDFP
    550 new-rwho new-who
    551 cybercash cybercash
    552 deviceshare deviceshare
    553 pirp pirp
    554 rtsp Real Time Stream Control Protocol
    556 remotefs rfs server
    557 openvms-sysipc openvms-sysipc
    558 sdnskmp SDNSKMP
    559 teedtap TEEDTAP
    560 rmonitor rmonitord
    562 chshell chcmd
    563 nntps nntp protocol over TLS/SSL (was snntp)
    564 9pfs plan 9 file service
    565 whoami whoami
    566 streettalk streettalk
    567 banyan-rpc banyan-rpc
    568 ms-shuttle microsoft shuttle
    569 ms-rome microsoft rome
    570 meter demon
    571 meter udemon
    572 sonar sonar
    573 banyan-vip banyan-vip
    574 ftp-agent FTP Software Agent System
    575 vemmi VEMMI
    576 ipcd ipcd
    577 vnas vnas
    578 ipdd ipdd
    579 decbsrv decbsrv
    580 sntp-heartbeat SNTP HEARTBEAT
    581 bdp Bundle Discovery Protocol
    582 scc-security SCC Security
    583 philips-vc Philips Video-Conferencing
    584 keyserver Key Server
    585 imap4-ssl IMAP4+SSL (use 993 instead)
    586 password-chg Password Change
    587 submission Submission
    588 cal CAL
    589 eyelink EyeLink
    590 tns-cml TNS CML
    591 http-alt FileMaker, Inc. – HTTP Alternate (see Port 80)
    592 eudora-set Eudora Set
    593 http-rpc-epmap HTTP RPC Ep Map
    594 tpip TPIP
    595 cab-protocol CAB Protocol
    596 smsd SMSD
    597 ptcnameservice PTC Name Service
    598 sco-websrvrmg3 SCO Web Server Manager 3
    599 acp Aeolon Core Protocol
    600 ipcserver Sun IPC server
    606 urm Cray Unified Resource Manager
    607 nqs nqs
    608 sift-uft Sender-Initiated/Unsolicited File Transfer
    609 npmp-trap npmp-trap
    610 npmp-local npmp-local
    611 npmp-gui npmp-gui
    612 hmmp-ind HMMP Indication
    613 hmmp-op HMMP Operation
    614 sshell SSLshell
    615 sco-inetmgr Internet Configuration Manager
    616 sco-sysmgr SCO System Administration Server
    617 sco-dtmgr SCO Desktop Administration Server
    618 dei-icda DEI-ICDA
    619 digital-evm Digital EVM
    620 sco-websrvrmgr SCO WebServer Manager
    621 escp-ip ESCP
    622 collaborator Collaborator
    623 aux_bus_shunt Aux Bus Shunt
    624 cryptoadmin Crypto Admin
    625 dec_dlm DEC DLM
    626 asia ASIA
    627 passgo-tivoli PassGo Tivoli
    628 qmqp QMQP
    629 3com-amp3 3Com AMP3
    630 rda RDA
    631 ipp IPP (Internet Printing Protocol)
    632 bmpp bmpp
    633 servstat Service Status update (Sterling Software)
    634 ginad ginad
    635 rlzdbase RLZ DBase
    636 ldaps ldap protocol over TLS/SSL (was sldap)
    637 lanserver lanserver
    638 mcns-sec mcns-sec
    639 msdp MSDP
    640 entrust-sps entrust-sps
    641 repcmd repcmd
    642 esro-emsdp ESRO-EMSDP V1.3
    643 sanity SANity
    644 dwr dwr
    645 pssc PSSC
    646 ldp LDP
    647 dhcp-failover DHCP Failover
    648 rrp Registry Registrar Protocol (RRP)
    649 aminet Aminet
    650 obex OBEX
    651 ieee-mms IEEE MMS
    652 udlr-dtcp UDLR_DTCP
    653 repscmd RepCmd
    654 aodv AODV
    655 tinc TINC
    656 spmp SPMP
    657 rmc RMC
    658 tenfold TenFold
    659 url-rendezvous URL Rendezvous
    660 mac-srvr-admin MacOS Server Admin
    661 hap HAP
    662 pftp PFTP
    663 purenoise PureNoise
    664 secure-aux-bus Secure Aux Bus
    665 sun-dr Sun DR
    666 doom doom Id Software
    667 disclose campaign contribution disclosures – SDR Technologies
    668 mecomm MeComm
    669 meregister MeRegister
    670 vacdsm-sws VACDSM-SWS
    671 vacdsm-app VACDSM-APP
    672 vpps-qua VPPS-QUA
    673 cimplex CIMPLEX
    674 acap ACAP
    675 dctp DCTP
    676 vpps-via VPPS Via
    677 vpp Virtual Presence Protocol
    678 ggf-ncp GNU Gereration Foundation NCP
    679 mrm MRM
    680 entrust-aaas entrust-aaas
    681 entrust-aams entrust-aams
    682 xfr XFR
    683 corba-iiop CORBA IIOP
    684 corba-iiop-ssl CORBA IIOP SSL
    685 mdc-portmapper MDC Port Mapper
    686 hcp-wismar Hardware Control Protocol Wismar
    687 asipregistry asipregistry
    688 realm-rusd REALM-RUSD
    689 nmap NMAP
    690 vatp VATP
    691 msexch-routing MS Exchange Routing
    692 hyperwave-isp Hyperwave-ISP
    693 connendp connendp
    694 ha-cluster ha-cluster
    695 ieee-mms-ssl IEEE-MMS-SSL
    696 rushd RUSHD
    697 uuidgen UUIDGEN
    698 olsr OLSR
    699 accessnetwork Access Network
    704 elcsd errlog copy/server daemon
    705 agentx AgentX
    706 silc SILC
    707 borland-dsj Borland DSJ
    709 entrust-kmsh Entrust Key Management Service Handler
    710 entrust-ash Entrust Administration Service Handler
    711 cisco-tdp Cisco TDP
    729 netviewdm1 IBM NetView DM/6000 Server/Client
    730 netviewdm2 IBM NetView DM/6000 send/tcp
    731 netviewdm3 IBM NetView DM/6000 receive/tcp
    740 netcp netscout control protocol
    741 netgw netGW
    742 netrcs Network based Rev. Cont. Sys.
    744 flexlm Flexible License Manager
    747 fujitsu-dev Fujitsu Device Control
    748 ris-cm Russell Info Sci Calendar Manager
    749 kerberos-adm kerberos administration
    754 tell send
    767 phonebook phone
    777 multiling-http Multiling HTTP
    781 hp-collector hp performance data collector
    782 hp-managed-node hp performance data managed node
    783 hp-alarm-mgr hp performance data alarm manager
    786 concert Concert
    787 qsc QSC
    799 controlit controlit 799/tcp
    800 mdbs_daemon
    810 fcp-udp FCP
    828 itm-mcell-s itm-mcell-s
    829 pkix-3-ca-ra PKIX-3 CA/RA
    847 dhcp-failover2 dhcp-failover 2
    871 supfilesrv sup server, for sup
    873 rsync rsync
    886 iclcnet-locate ICL coNETion locate server
    887 iclcnet_svinfo ICL coNETion server info
    888 accessbuilder AccessBuilder
    900 omginitialrefs OMG Initial Refs
    901 smpnameres SMPNAMERES
    902 ideafarm-chat IDEAFARM-CHAT
    903 ideafarm-catch IDEAFARM-CATCH
    911 xact-backup xact-backup
    989 ftps-data ftp protocol, data, over TLS/SSL
    990 ftps ftp protocol, control, over TLS/SSL
    991 nas Netnews Administration System
    992 telnets telnet protocol over TLS/SSL
    993 imaps imap4 protocol over TLS/SSL
    994 ircs irc protocol over TLS/SSL
    995 pop3s pop3 protocol over TLS/SSL (was spop3)
    996 vsinet vsinet
    1001 trojan Silencer, WebEx
    1008 ufsd ufsd
    1010 surf surf
    1011 trojan Doly Trojan
    1025 blackjack network blackjack
    1026 nterm remote_login network_terminal
    1030 iad1 BBN IAD
    1031 iad2 BBN IAD
    1032 iad3 BBN IAD
    1045 trojan Rasmin Trojan
    1047 neod1 Sun’s NEO Object Request Broker
    1048 neod2 Sun’s NEO Object Request Broker
    1049 td-postman Tobit David Postman VPMN
    1050 cma CORBA Management Agent
    1051 optima-vnet Optima VNET
    1052 ddt Dynamic DNS Tools
    1053 remote-as Remote Assistant (RA)
    1054 brvread BRVREAD
    1055 ansyslmd ANSYS – License Manager
    1056 vfo VFO
    1057 startron STARTRON
    1058 nim nim
    1059 nimreg nimreg
    1060 polestar POLESTAR
    1061 kiosk KIOSK
    1062 veracity Veracity
    1063 kyoceranetdev KyoceraNetDev
    1064 jstel JSTEL
    1065 syscomlan SYSCOMLAN
    1066 fpo-fns FPO-FNS
    1067 instl_boots Installation Bootstrap Proto. Serv.
    1068 instl_bootc Installation Bootstrap Proto. Cli.
    1069 cognex-insight COGNEX-INSIGHT
    1070 gmrupdateserv GMRUpdateSERV
    1071 bsquare-voip BSQUARE-VOIP
    1072 cardax CARDAX
    1073 bridgecontrol BridgeControl
    1074 fastechnologlm FASTechnologies License Manager
    1075 rdrmshc RDRMSHC
    1076 dab-sti-c DAB STI-C
    1077 imgames IMGames
    1078 emanagecstp eManageCstp
    1079 asprovatalk ASPROVATalk
    1080 socks Socks
    1081 pvuniwien PVUNIWIEN
    1082 amt-esd-prot AMT-ESD-PROT
    1083 ansoft-lm-1 Anasoft License Manager
    1084 ansoft-lm-2 Anasoft License Manager
    1085 webobjects Web Objects
    1086 cplscrambler-lg CPL Scrambler Logging
    1087 cplscrambler-in CPL Scrambler Internal
    1088 cplscrambler-al CPL Scrambler Alarm Log
    1089 ff-annunc FF Annunciation
    1090 ff-fms FF Fieldbus Message Specification
    1091 ff-sm FF System Management
    1092 obrpd OBRPD
    1093 proofd PROOFD
    1094 rootd ROOTD
    1095 nicelink NICELink
    1096 cnrprotocol Common Name Resolution Protocol
    1097 sunclustermgr Sun Cluster Manager
    1098 rmiactivation RMI Activation
    1099 rmiregistry RMI Registry
    1100 mctp MCTP
    1101 pt2-discover PT2-DISCOVER
    1102 adobeserver-1 ADOBE SERVER 1
    1103 adobeserver-2 ADOBE SERVER 2
    1104 xrl XRL
    1105 ftranhc FTRANHC
    1106 isoipsigport-1 ISOIPSIGPORT-1
    1107 isoipsigport-2 ISOIPSIGPORT-2
    1108 ratio-adp ratio-adp
    1109 kpop pop with kerberos
    1110 nfsd-status Cluster status info
    1111 lmsocialserver LM Social Server
    1112 icp Intelligent Communication Protocol
    1114 mini-sql Mini SQL
    1115 ardus-trns ARDUS Transfer
    1116 ardus-cntl ARDUS Control
    1117 ardus-mtrns ARDUS Multicast Transfer
    1122 availant-mgr availant-mgr
    1123 murray Murray
    1127 supfiledbg sup debugging, for sup
    1155 nfa Network File Access
    1161 health-polling Health Polling
    1162 health-trap Health Trap
    1169 tripwire TRIPWIRE
    1170 trojan Psyber Stream Server Trojan
    1178 skkserv skk (kanji input)
    1180 mc-client Millicent Client Proxy
    1188 hp-webadmin HP Web Admin
    1200 scol SCOL
    1201 nucleus-sand Nucleus Sand
    1202 caiccipc caiccipc
    1203 ssslic-mgr License Validation
    1204 ssslog-mgr Log Request Listener
    1205 accord-mgc Accord-MGC
    1206 anthony-data Anthony Data
    1207 metasage MetaSage
    1208 seagull-ais SEAGULL AIS
    1209 ipcd3 IPCD3
    1210 eoss EOSS
    1211 groove-dpp Groove DPP
    1212 lupa lupa
    1213 mpc-lifenet MPC LIFENET
    1214 kazaa KAZAA
    1215 scanstat-1 scanSTAT 1.0
    1216 etebac5 ETEBAC 5
    1217 hpss-ndapi HPSS-NDAPI
    1218 aeroflight-ads AeroFlight-ADs
    1219 aeroflight-ret AeroFlight-Ret
    1220 qt-serveradmin QT SERVER ADMIN
    1221 sweetware-apps SweetWARE Apps
    1222 nerv SNI R&D network
    1223 tgp TGP
    1224 vpnz VPNz
    1225 slinkysearch SLINKYSEARCH
    1226 stgxfws STGXFWS
    1227 dns2go DNS2Go
    1228 florence FLORENCE
    1229 novell-zfs Novell ZFS
    1230 periscope Periscope
    1231 menandmice-lpm menandmice-lpm
    1232 mtrgtrans mtrgtrans
    1233 univ-appserver Universal App Server
    1234 search-agent Infoseek Search Agent
    1235 mosaicsyssvc1 mosaicsyssvc1
    1236 bvcontrol bvcontrol
    1237 tsdos390 tsdos390
    1238 hacl-qs hacl-qs
    1239 nmsd NMSD
    1240 instantia Instantia
    1241 msg remote message server
    1242 nmasoverip NMAS over IP
    1243 serialgateway SerialGateway
    1244 isbconference1 isbconference1
    1245 isbconference2 isbconference2
    1246 payrouter payrouter
    1247 visionpyramid VisionPyramid
    1248 hermes hermes
    1249 mesavistaco Mesa Vista Co
    1250 swldy-sias swldy-sias
    1251 servergraph servergraph
    1252 bspne-pcc bspne-pcc
    1253 q55-pcc q55-pcc
    1254 de-noc de-noc
    1255 de-cache-query de-cache-query
    1256 de-server de-server
    1257 shockwave2 Shockwave 2
    1258 opennl Open Network Library
    1259 opennl-voice Open Network Library Voice
    1260 ibm-ssd ibm-ssd
    1261 mpshrsv mpshrsv
    1262 qnts-orb QNTS-ORB
    1263 dka dka
    1264 prat PRAT
    1265 dssiapi DSSIAPI
    1266 dellpwrappks DELLPWRAPPKS
    1267 pcmlinux pcmlinux
    1268 propel-msgsys PROPEL-MSGSYS
    1269 watilapp WATiLaPP
    1270 opsman opsman
    1271 dabew Dabew
    1272 cspmlockmgr CSPMLockMgr
    1273 emc-gateway EMC-Gateway
    1274 t1distproc t1distproc
    1275 ivcollector ivcollector
    1276 ivmanager ivmanager
    1277 miva-mqs mqs
    1278 dellwebadmin-1 Dell Web Admin 1
    1279 dellwebadmin-2 Dell Web Admin 2
    1280 pictrography Pictrography
    1281 healthd healthd
    1282 emperion Emperion
    1283 productinfo ProductInfo
    1284 iee-qfx IEE-QFX
    1285 neoiface neoiface
    1286 netuitive netuitive
    1288 navbuddy NavBuddy
    1289 jwalkserver JWalkServer
    1290 winjaserver WinJaServer
    1291 seagulllms SEAGULLLMS
    1292 dsdn dsdn
    1293 pkt-krb-ipsec PKT-KRB-IPSec
    1294 cmmdriver CMMdriver
    1295 eetp EETP
    1296 dproxy dproxy
    1297 sdproxy sdproxy
    1298 lpcp lpcp
    1299 hp-sci hp-sci
    1300 h323hostcallsc H323 Host Call Secure
    1301 ci3-software-1 CI3-Software-1
    1302 ci3-software-2 CI3-Software-2
    1303 sftsrv sftsrv
    1304 boomerang Boomerang
    1305 pe-mike pe-mike
    1306 re-conn-proto RE-Conn-Proto
    1307 pacmand Pacmand
    1308 odsi Optical Domain Service Interconnect (ODSI)
    1309 jtag-server JTAG server
    1310 husky Husky
    1311 rxmon RxMon
    1312 sti-envision STI Envision
    1313 bmc_patroldb BMC_PATROLDB
    1314 pdps Photoscript Distributed Printing System
    1315 els els
    1316 exbit-escp Exbit-ESCP
    1317 vrts-ipcserver vrts-ipcserver
    1318 krb5gatekeeper krb5gatekeeper
    1319 panja-icsp Panja-ICSP
    1320 panja-axbnet Panja-AXBNET
    1321 pip PIP
    1322 novation Novation
    1323 brcd brcd
    1324 delta-mcp delta-mcp
    1325 dx-instrument DX-Instrument
    1326 wimsic WIMSIC
    1327 ultrex Ultrex
    1328 ewall EWALL
    1329 netdb-export netdb-export
    1330 streetperfect StreetPerfect
    1331 intersan intersan
    1332 pcia-rxp-b PCIA RXP-B
    1333 passwrd-policy Password Policy
    1334 writesrv writesrv
    1335 digital-notary Digital Notary Protocol
    1336 ischat Instant Service Chat
    1337 menandmice-dns menandmice DNS
    1338 wmc-log-svc WMC-log-svr
    1339 kjtsiteserver kjtsiteserver
    1340 naap NAAP
    1341 qubes QuBES
    1342 esbroker ESBroker
    1343 re101 re101
    1344 icap ICAP
    1345 vpjp VPJP
    1346 alta-ana-lm Alta Analytics License Manager
    1347 bbn-mmc multi media conferencing
    1348 bbn-mmx multi media conferencing
    1349 sbook Registration Network Protocol
    1350 editbench Registration Network Protocol
    1351 equationbuilder Digital Tool Works (MIT)
    1352 lotusnote Lotus Note
    1353 relief Relief Consulting
    1354 rightbrain RightBrain Software
    1355 intuitive-edge Intuitive Edge
    1356 cuillamartin CuillaMartin Company
    1357 pegboard Electronic PegBoard
    1358 connlcli CONNLCLI
    1359 ftsrv FTSRV
    1360 mimer MIMER
    1361 linx LinX
    1362 timeflies TimeFlies
    1363 ndm-requester Network DataMover Requester
    1364 ndm-server Network DataMover Server
    1365 adapt-sna Network Software Associates
    1366 netware-csp Novell NetWare Comm Service Platform
    1367 dcs DCS
    1368 screencast ScreenCast
    1369 gv-us GlobalView to Unix Shell
    1370 us-gv Unix Shell to GlobalView
    1371 fc-cli Fujitsu Config Protocol
    1372 fc-ser Fujitsu Config Protocol
    1373 chromagrafx Chromagrafx
    1374 molly EPI Software Systems
    1375 bytex Bytex
    1376 ibm-pps IBM Person to Person Software
    1377 cichlid Cichlid License Manager
    1378 elan Elan License Manager
    1379 dbreporter Integrity Solutions
    1380 telesis-licman Telesis Network License Manager
    1381 apple-licman Apple Network License Manager
    1382 udt_os udt_os
    1383 gwha GW Hannaway Network License Manager
    1384 os-licman Objective Solutions License Manager
    1385 atex_elmd Atex Publishing License Manager
    1386 checksum CheckSum License Manager
    1387 cadsi-lm Computer Aided Design Software Inc LM
    1388 objective-dbc Objective Solutions DataBase Cache
    1389 iclpv-dm Document Manager
    1390 iclpv-sc Storage Controller
    1391 iclpv-sas Storage Access Server
    1392 iclpv-pm Print Manager
    1393 iclpv-nls Network Log Server
    1394 iclpv-nlc Network Log Client
    1395 iclpv-wsm PC Workstation Manager software
    1396 dvl-activemail DVL Active Mail
    1397 audio-activmail Audio Active Mail
    1398 video-activmail Video Active Mail
    1399 cadkey-licman Cadkey License Manager
    1400 cadkey-tablet Cadkey Tablet Daemon
    1401 goldleaf-licman Goldleaf License Manager
    1402 prm-sm-np Prospero Resource Manager
    1403 prm-nm-np Prospero Resource Manager
    1404 igi-lm Infinite Graphics License Manager
    1405 ibm-res IBM Remote Execution Starter
    1406 netlabs-lm NetLabs License Manager
    1407 dbsa-lm DBSA License Manager
    1408 sophia-lm Sophia License Manager
    1409 here-lm Here License Manager
    1410 hiq HiQ License Manager
    1411 af AudioFile
    1412 innosys InnoSys
    1413 innosys-acl Innosys-ACL
    1414 ibm-mqseries IBM MQSeries
    1415 dbstar DBStar
    1416 novell-lu6.2 Novell LU6.2
    1417 timbuktu-srv1 Timbuktu Service 1 Port
    1418 timbuktu-srv2 Timbuktu Service 2 Port
    1419 timbuktu-srv3 Timbuktu Service 3 Port
    1420 timbuktu-srv4 Timbuktu Service 4 Port
    1421 gandalf-lm Gandalf License Manager
    1422 autodesk-lm Autodesk License Manager
    1423 essbase Essbase Arbor Software
    1424 hybrid Hybrid Encryption Protocol
    1425 zion-lm Zion Software License Manager
    1426 sais Satellite-data Acquisition System 1
    1427 mloadd mloadd monitoring tool
    1428 informatik-lm Informatik License Manager
    1429 nms Hypercom NMS
    1430 tpdu Hypercom TPDU
    1431 rgtp Reverse Gossip Transport
    1432 blueberry-lm Blueberry Software License Manager
    1433 ms-sql-s Microsoft-SQL-Server
    1434 ms-sql-m Microsoft-SQL-Monitor
    1435 ibm-cics IBM CICS
    1436 saism Satellite-data Acquisition System 2
    1437 tabula Tabula
    1438 eicon-server Eicon Security Agent/Server
    1439 eicon-x25 Eicon X25/SNA Gateway
    1440 eicon-slp Eicon Service Location Protocol
    1441 cadis-1 Cadis License Management
    1442 cadis-2 Cadis License Management
    1443 ies-lm Integrated Engineering Software
    1444 marcam-lm Marcam License Management
    1445 proxima-lm Proxima License Manager
    1446 ora-lm Optical Research Associates License Manager
    1447 apri-lm Applied Parallel Research LM
    1448 oc-lm OpenConnect License Manager
    1449 peport PEport
    1450 dwf Tandem Distributed Workbench Facility
    1451 infoman IBM Information Management
    1452 gtegsc-lm GTE Government Systems License Man
    1453 genie-lm Genie License Manager
    1454 interhdl_elmd interHDL License Manager
    1455 esl-lm ESL License Manager
    1456 dca DCA
    1457 valisys-lm Valisys License Manager
    1458 nrcabq-lm Nichols Research Corp.
    1459 proshare1 Proshare Notebook Application
    1460 proshare2 Proshare Notebook Application
    1461 ibm_wrless_lan IBM Wireless LAN
    1462 world-lm World License Manager
    1463 nucleus Nucleus
    1464 msl_lmd MSL License Manager
    1465 pipes Pipes Platform
    1466 oceansoft-lm Ocean Software License Manager
    1467 csdmbase CSDMBASE
    1468 csdm CSDM
    1469 aal-lm Active Analysis Limited License Manager
    1470 uaiact Universal Analytics
    1471 csdmbase csdmbase
    1472 csdm csdm
    1473 openmath OpenMath
    1474 telefinder Telefinder
    1475 taligent-lm Taligent License Manager
    1476 clvm-cfg clvm-cfg
    1477 ms-sna-server ms-sna-server
    1478 ms-sna-base ms-sna-base
    1479 dberegister dberegister
    1480 pacerforum PacerForum
    1481 airs AIRS
    1482 miteksys-lm Miteksys License Manager
    1483 afs AFS License Manager
    1484 confluent Confluent License Manager
    1485 lansource LANSource
    1486 nms_topo_serv nms_topo_serv
    1487 localinfosrvr LocalInfoSrvr
    1488 docstor DocStor
    1489 dmdocbroker dmdocbroker
    1490 insitu-conf insitu-conf
    1491 anynetgateway anynetgateway
    1492 stone-design-1 stone-design-1
    1493 netmap_lm netmap_lm
    1494 ica ica
    1495 cvc cvc
    1496 liberty-lm liberty-lm
    1497 rfx-lm rfx-lm
    1498 sybase-sqlany Sybase SQL Any
    1499 fhc Federico Heinz Consultora
    1500 vlsi-lm VLSI License Manager
    1501 saiscm Satellite-data Acquisition System 3
    1502 shivadiscovery Shiva
    1503 imtc-mcs Databeam
    1504 evb-elm EVB Software Engineering License Manager
    1505 funkproxy Funk Software, Inc.
    1506 utcd Universal Time daemon (utcd)
    1507 symplex symplex
    1508 diagmond diagmond
    1509 robcad-lm Robcad, Ltd. License Manager
    1510 mvx-lm Midland Valley Exploration Ltd. Lic. Man.
    1511 3l-l1 3l-l1
    1512 wins Microsoft’s Windows Internet Name Service
    1513 fujitsu-dtc Fujitsu Systems Business of America, Inc
    1514 fujitsu-dtcns Fujitsu Systems Business of America, Inc
    1515 ifor-protocol ifor-protocol
    1516 vpad Virtual Places Audio data
    1517 vpac Virtual Places Audio control
    1518 vpvd Virtual Places Video data
    1519 vpvc Virtual Places Video control
    1520 atm-zip-office atm zip office
    1521 ncube-lm nCube License Manager
    1522 ricardo-lm Ricardo North America License Manager
    1523 cichild-lm cichild
    1524 ingreslock ingres
    1525 orasrv oracle
    1526 pdap-np Prospero Data Access Prot non-priv
    1527 tlisrv oracle
    1528 mciautoreg micautoreg
    1529 coauthor cygnus bug tracker, prmsd gnatsd
    1530 rap-service rap-service
    1531 rap-listen rap-listen
    1532 miroconnect miroconnect
    1533 virtual-places Virtual Places Software
    1534 micromuse-lm micromuse-lm
    1535 ampr-info ampr-info
    1536 ampr-inter ampr-inter
    1537 sdsc-lm isi-lm
    1538 3ds-lm 3ds-lm
    1539 intellistor-lm Intellistor License Manager
    1540 rds rds
    1541 rds2 rds2
    1542 gridgen-elmd gridgen-elmd
    1543 simba-cs simba-cs
    1544 aspeclmd aspeclmd
    1545 vistium-share vistium-share
    1546 abbaccuray abbaccuray
    1547 laplink laplink
    1548 axon-lm Axon License Manager
    1549 shivahose Shiva Hose
    1550 3m-image-lm Image Storage license manager 3M Company
    1551 hecmtl-db HECMTL-DB
    1552 pciarray pciarray
    1553 sna-cs sna-cs
    1554 caci-lm CACI Products Company License Manager
    1555 livelan livelan
    1556 ashwin AshWin CI Tecnologies
    1557 arbortext-lm ArborText License Manager
    1558 xingmpeg xingmpeg
    1559 web2host web2host
    1560 asci-val asci-val
    1561 facilityview facilityview
    1562 pconnectmgr pconnectmgr
    1563 cadabra-lm Cadabra License Manager
    1564 pay-per-view Pay-Per-View
    1565 winddlb WinDD
    1566 corelvideo CORELVIDEO
    1567 jlicelmd jlicelmd
    1568 tsspmap tsspmap
    1569 ets ets
    1570 orbixd orbixd
    1571 rdb-dbs-disp Oracle Remote Data Base
    1572 chip-lm Chipcom License Manager
    1573 itscomm-ns itscomm-ns
    1574 mvel-lm mvel-lm
    1575 oraclenames oraclenames
    1576 moldflow-lm moldflow-lm
    1577 hypercube-lm hypercube-lm
    1578 jacobus-lm Jacobus License Manager
    1579 ioc-sea-lm ioc-sea-lm
    1580 tn-tl-r1 tn-tl-r1
    1581 mil-2045-47001 MIL-2045-47001
    1582 msims MSIMS
    1583 simbaexpress simbaexpress
    1584 tn-tl-fd2 tn-tl-fd2
    1585 intv intv
    1586 ibm-abtact ibm-abtact
    1587 pra_elmd pra_elmd
    1588 triquest-lm triquest-lm
    1589 vqp VQP
    1590 gemini-lm gemini-lm
    1591 ncpm-pm ncpm-pm
    1592 commonspace commonspace
    1593 mainsoft-lm mainsoft-lm
    1594 sixtrak sixtrak
    1595 radio radio
    1596 radio-sm radio-sm
    1597 orbplus-iiop orbplus-iiop
    1598 picknfs picknfs
    1599 simbaservices simbaservices
    1601 aas aas
    1602 inspect inspect
    1603 picodbc pickodbc
    1604 icabrowser icabrowser
    1605 slp Salutation Manager (Salutation Protocol)
    1606 slm-api Salutation Manager (SLM-API)
    1607 stt stt
    1608 smart-lm Smart Corp. License Manager
    1609 isysg-lm isysg-lm
    1610 taurus-wh taurus-wh
    1611 ill Inter Library Loan
    1612 netbill-trans NetBill Transaction Server
    1613 netbill-keyrep NetBill Key Repository
    1614 netbill-cred NetBill Credential Server
    1615 netbill-auth NetBill Authorization Server
    1616 netbill-prod NetBill Product Server
    1617 nimrod-agent Nimrod Inter-Agent Communication
    1618 skytelnet skytelnet
    1619 xs-openstorage xs-openstorage
    1620 faxportwinport faxportwinport
    1621 softdataphone softdataphone
    1622 ontime ontime
    1623 jaleosnd jaleosnd
    1624 udp-sr-port udp-sr-port
    1625 svs-omagent svs-omagent
    1626 shockwave Shockwave
    1627 t128-gateway T.128 Gateway
    1628 lontalk-norm LonTalk normal
    1629 lontalk-urgnt LonTalk urgent
    1630 oraclenet8cman Oracle Net8 Cman
    1631 visitview Visit view
    1632 pammratc PAMMRATC
    1633 pammrpc PAMMRPC
    1634 loaprobe Log On America Probe
    1635 edb-server1 EDB Server 1
    1636 cncp CableNet Control Protocol
    1637 cnap CableNet Admin Protocol
    1638 cnip CableNet Info Protocol
    1639 cert-initiator cert-initiator
    1640 cert-responder cert-responder
    1641 invision InVision
    1642 isis-am isis-am
    1643 isis-ambc isis-ambc
    1644 saiseh Satellite-data Acquisition System 4
    1645 datametrics datametrics
    1646 sa-msg-port sa-msg-port
    1647 rsap rsap
    1648 concurrent-lm concurrent-lm
    1649 kermit kermit
    1650 nkd nkd
    1651 shiva_confsrvr shiva_confsrvr
    1652 xnmp xnmp
    1653 alphatech-lm alphatech-lm
    1654 stargatealerts stargatealerts
    1655 dec-mbadmin dec-mbadmin
    1656 dec-mbadmin-h dec-mbadmin-h
    1657 fujitsu-mmpdc fujitsu-mmpdc
    1658 sixnetudr sixnetudr
    1659 sg-lm Silicon Grail License Manager
    1660 skip-mc-gikreq skip-mc-gikreq
    1661 netview-aix-1 netview-aix-1
    1662 netview-aix-2 netview-aix-2
    1663 netview-aix-3 netview-aix-3
    1664 netview-aix-4 netview-aix-4
    1665 netview-aix-5 netview-aix-5
    1666 netview-aix-6 netview-aix-6
    1667 netview-aix-7 netview-aix-7
    1668 netview-aix-8 netview-aix-8
    1669 netview-aix-9 netview-aix-9
    1670 netview-aix-10 netview-aix-10
    1671 netview-aix-11 netview-aix-11
    1672 netview-aix-12 netview-aix-12
    1673 proshare-mc-1 Intel Proshare Multicast
    1674 proshare-mc-2 Intel Proshare Multicast
    1675 pdp Pacific Data Products
    1676 netcomm1 netcomm1
    1677 groupwise groupwise
    1678 prolink prolink
    1679 darcorp-lm darcorp-lm
    1680 microcom-sbp microcom-sbp
    1681 sd-elmd sd-elmd
    1682 lanyon-lantern lanyon-lantern
    1683 ncpm-hip ncpm-hip
    1684 snaresecure SnareSecure
    1685 n2nremote n2nremote
    1686 cvmon cvmon
    1687 nsjtp-ctrl nsjtp-ctrl
    1688 nsjtp-data nsjtp-data
    1689 firefox firefox
    1690 ng-umds ng-umds
    1691 empire-empuma empire-empuma
    1692 sstsys-lm sstsys-lm
    1693 rrirtr rrirtr
    1694 rrimwm rrimwm
    1695 rrilwm rrilwm
    1696 rrifmm rrifmm
    1697 rrisat rrisat
    1698 rsvp-encap-1 RSVP-ENCAPSULATION-1
    1699 rsvp-encap-2 RSVP-ENCAPSULATION-2
    1700 mps-raft mps-raft
    1701 l2f l2f
    1702 deskshare deskshare
    1703 hb-engine hb-engine
    1704 bcs-broker bcs-broker
    1705 slingshot slingshot
    1706 jetform jetform
    1707 vdmplay vdmplay
    1708 gat-lmd gat-lmd
    1709 centra centra
    1710 impera impera
    1711 pptconference pptconference
    1712 registrar resource monitoring service
    1713 conferencetalk ConferenceTalk
    1714 sesi-lm sesi-lm
    1715 houdini-lm houdini-lm
    1716 xmsg xmsg
    1717 fj-hdnet fj-hdnet
    1718 h323gatedisc h323gatedisc
    1719 h323gatestat h323gatestat
    1720 h323hostcall h323hostcall
    1721 caicci caicci
    1722 hks-lm HKS License Manager
    1723 pptp point-to-point tunnelling protocol, pptp
    1724 csbphonemaster csbphonemaster
    1725 iden-ralp iden-ralp
    1726 iberiagames IBERIAGAMES
    1727 winddx winddx
    1728 telindus TELINDUS
    1729 citynl CityNL License Management
    1730 roketz roketz
    1731 msiccp MSICCP
    1732 proxim proxim
    1733 siipat SIMS – SIIPAT Protocol for Alarm Transmission
    1734 cambertx-lm Camber Corporation License Management
    1735 privatechat PrivateChat
    1736 street-stream street-stream
    1737 ultimad ultimad
    1738 gamegen1 GameGen1
    1739 webaccess webaccess
    1740 encore encore
    1741 cisco-net-mgmt cisco-net-mgmt
    1742 3Com-nsd 3Com-nsd
    1743 cinegrfx-lm Cinema Graphics License Manager
    1744 ncpm-ft ncpm-ft
    1745 remote-winsock remote-winsock
    1746 ftrapid-1 ftrapid-1
    1747 ftrapid-2 ftrapid-2
    1748 oracle-em1 oracle-em1
    1749 aspen-services aspen-services
    1750 sslp Simple Socket Library’s PortMaster
    1751 swiftnet SwiftNet
    1752 lofr-lm Leap of Faith Research License Manager
    1753 translogic-lm Translogic License Manager
    1754 oracle-em2 oracle-em2
    1755 ms-streaming ms-streaming
    1756 capfast-lmd capfast-lmd
    1757 cnhrp cnhrp
    1758 tftp-mcast tftp-mcast
    1759 spss-lm SPSS License Manager
    1760 www-ldap-gw www-ldap-gw
    1761 cft-0 cft-0
    1762 cft-1 cft-1
    1763 cft-2 cft-2
    1764 cft-3 cft-3
    1765 cft-4 cft-4
    1766 cft-5 cft-5
    1767 cft-6 cft-6
    1768 cft-7 cft-7
    1769 bmc-net-adm bmc-net-adm
    1770 bmc-net-svc bmc-net-svc
    1771 vaultbase vaultbase
    1772 essweb-gw EssWeb Gateway
    1773 kmscontrol KMSControl
    1774 global-dtserv global-dtserv
    1776 femis Federal Emergency Management Information System
    1777 powerguardian powerguardian
    1778 prodigy-intrnet prodigy-internet
    1779 pharmasoft pharmasoft
    1780 dpkeyserv dpkeyserv
    1781 answersoft-lm answersoft-lm
    1782 hp-hcip hp-hcip
    1784 finle-lm Finle License Manager
    1785 windlm Wind River Systems License Manager
    1786 funk-logger funk-logger
    1787 funk-license funk-license
    1788 psmond psmond
    1789 hello hello
    1790 nmsp Narrative Media Streaming Protocol
    1791 ea1 EA1
    1792 ibm-dt-2 ibm-dt-2
    1793 rsc-robot rsc-robot
    1794 cera-bcm cera-bcm
    1795 dpi-proxy dpi-proxy
    1796 vocaltec-admin Vocaltec Server Administration
    1797 uma UMA
    1798 etp Event Transfer Protocol
    1799 netrisk NETRISK
    1800 ansys-lm ANSYS-License manager
    1801 msmq Microsoft Message Que
    1802 concomp1 ConComp1
    1803 hp-hcip-gwy HP-HCIP-GWY
    1804 enl ENL
    1805 enl-name ENL-Name
    1806 musiconline Musiconline
    1807 fhsp Fujitsu Hot Standby Protocol
    1808 oracle-vp2 Oracle-VP2
    1809 oracle-vp1 Oracle-VP1
    1810 jerand-lm Jerand License Manager
    1811 scientia-sdb Scientia-SDB
    1812 radius RADIUS
    1813 radius-acct RADIUS Accounting
    1814 tdp-suite TDP Suite
    1815 mmpft MMPFT
    1816 harp HARP
    1817 rkb-oscs RKB-OSCS
    1818 etftp Enhanced Trivial File Transfer Protocol
    1819 plato-lm Plato License Manager
    1820 mcagent mcagent
    1821 donnyworld donnyworld
    1822 es-elmd es-elmd
    1823 unisys-lm Unisys Natural Language License Manager
    1824 metrics-pas metrics-pas
    1825 direcpc-video DirecPC Video
    1826 ardt ARDT
    1827 asi ASI
    1828 itm-mcell-u itm-mcell-u
    1829 optika-emedia Optika eMedia
    1830 net8-cman Oracle Net8 CMan Admin
    1831 myrtle Myrtle
    1832 tht-treasure ThoughtTreasure
    1833 udpradio udpradio
    1834 ardusuni ARDUS Unicast
    1835 ardusmul ARDUS Multicast
    1836 ste-smsc ste-smsc
    1837 csoft1 csoft1
    1838 talnet TALNET
    1839 netopia-vo1 netopia-vo1
    1840 netopia-vo2 netopia-vo2
    1841 netopia-vo3 netopia-vo3
    1842 netopia-vo4 netopia-vo4
    1843 netopia-vo5 netopia-vo5
    1844 direcpc-dll DirecPC-DLL
    1845 altalink altalink
    1846 tunstall-pnc Tunstall PNC
    1847 slp-notify SLP Notification
    1848 fjdocdist fjdocdist
    1849 alpha-sms ALPHA-SMS
    1850 gsi GSI
    1851 ctcd ctcd
    1852 virtual-time Virtual Time
    1853 vids-avtp VIDS-AVTP
    1854 buddy-draw Buddy Draw
    1855 fiorano-rtrsvc Fiorano RtrSvc
    1856 fiorano-msgsvc Fiorano MsgSvc
    1857 datacaptor DataCaptor
    1858 privateark PrivateArk
    1859 gammafetchsvr Gamma Fetcher Server
    1860 sunscalar-svc SunSCALAR Services
    1861 lecroy-vicp LeCroy VICP
    1862 techra-server techra-server
    1863 msnp MSNP
    1864 paradym-31port Paradym 31 Port
    1865 entp ENTP
    1866 swrmi swrmi
    1867 udrive UDRIVE
    1868 viziblebrowser VizibleBrowser
    1869 yestrader YesTrader
    1870 sunscalar-dns SunSCALAR DNS Service
    1871 canocentral0 Cano Central 0
    1872 canocentral1 Cano Central 1
    1873 fjmpjps Fjmpjps
    1874 fjswapsnp Fjswapsnp
    1875 westell-stats westell stats
    1876 ewcappsrv ewcappsrv
    1877 hp-webqosdb hp-webqosdb
    1881 ibm-mqseries2 IBM MQSeries
    1895 vista-4gl Vista 4GL
    1899 mc2studios MC2Studios
    1900 ssdp SSDP
    1901 fjicl-tep-a Fujitsu ICL Terminal Emulator Program A
    1902 fjicl-tep-b Fujitsu ICL Terminal Emulator Program B
    1903 linkname Local Link Name Resolution
    1904 fjicl-tep-c Fujitsu ICL Terminal Emulator Program C
    1905 sugp Secure UP.Link Gateway Protocol
    1906 tpmd TPortMapperReq
    1907 intrastar IntraSTAR
    1908 dawn Dawn
    1909 global-wlink Global World Link
    1910 ultrabac ultrabac
    1911 mtp Starlight Networks Multimedia Transport Protocol
    1912 rhp-iibp rhp-iibp
    1913 armadp armadp
    1914 elm-momentum Elm-Momentum
    1915 facelink FACELINK
    1916 persona Persoft Persona
    1917 noagent nOAgent
    1918 can-nds Candle Directory Service – NDS
    1919 can-dch Candle Directory Service – DCH
    1920 can-ferret Candle Directory Service – FERRET
    1921 noadmin NoAdmin
    1922 tapestry Tapestry
    1923 spice SPICE
    1924 xiip XIIP
    1930 driveappserver Drive AppServer
    1931 amdsched AMD SCHED
    1941 dic-aida DIC-Aida
    1944 close-combat close-combat
    1945 dialogic-elmd dialogic-elmd
    1946 tekpls tekpls
    1947 hlserver hlserver
    1948 eye2eye eye2eye
    1949 ismaeasdaqlive ISMA Easdaq Live
    1950 ismaeasdaqtest ISMA Easdaq Test
    1951 bcs-lmserver bcs-lmserver
    1952 mpnjsc mpnjsc
    1953 rapidbase Rapid Base
    1957 unix-status unix-status
    1961 bts-appserver BTS APPSERVER
    1962 biap-mp BIAP-MP
    1963 webmachine WebMachine
    1964 solid-e-engine SOLID E ENGINE
    1965 tivoli-npm Tivoli NPM
    1966 slush Slush
    1967 sns-quote SNS Quote
    1972 intersys-cache Cache
    1973 dlsrap Data Link Switching Remote Access Protocol
    1974 drp DRP
    1975 tcoflashagent TCO Flash Agent
    1976 tcoregagent TCO Reg Agent
    1977 tcoaddressbook TCO Address Book
    1978 unisql UniSQL
    1979 unisql-java UniSQL Java
    1981 trojan ShockRave Trojan
    1984 bb BB
    1985 hsrp Hot Standby Router Protocol
    1986 licensedaemon cisco license management
    1987 tr-rsrb-p1 cisco RSRB Priority 1 port
    1988 tr-rsrb-p2 cisco RSRB Priority 2 port
    1989 mshnet MHSnet system
    1990 stun-p1 cisco STUN Priority 1 port
    1991 stun-p2 cisco STUN Priority 2 port
    1992 ipsendmsg IPsendmsg
    1993 snmp-tcp-port cisco SNMP TCP port
    1994 stun-port cisco serial tunnel port
    1995 perf-port cisco perf port
    1996 tr-rsrb-port cisco Remote SRB port
    1997 gdp-port cisco Gateway Discovery Protocol
    1998 x25-svc-port cisco X.25 service (XOT)
    1999 tcp-id-port cisco identification port
    2003 cfingerd gnu finger
    2011 raid-cc raid
    2042 isis isis
    2043 isis-bcast isis-bcast
    2049 nfs Network File System – Sun Microsystems
    2064 distrib-netassholes lamers working for solving rsa crypto challenge.
    2065 dlsrpn Data Link Switch Read Port Number
    2067 dlswpn Data Link Switch Write Port Number
    2087 eli ELI – Event Logging Integration
    2089 sep Security Encapsulation Protocol – SEP
    2090 lrp Load Report Protocol
    2091 prp PRP
    2092 descent3 Descent 3
    2093 nbx-cc NBX CC
    2094 nbx-au NBX AU
    2095 nbx-ser NBX SER
    2096 nbx-dir NBX DIR
    2097 jetformpreview Jet Form Preview
    2098 dialog-port Dialog Port
    2099 h2250-annex-g H.225.0 Annex G
    2100 amiganetfs amiganetfs
    2101 rtcm-sc104 rtcm-sc104
    2102 zephyr-srv Zephyr server
    2103 zephyr-clt Zephyr serv-hm connection
    2104 zephyr-hm Zephyr hostmanager
    2105 minipay MiniPay
    2106 mzap MZAP
    2107 bintec-admin BinTec Admin
    2108 comcam Comcam
    2109 ergolight Ergolight
    2110 umsp UMSP
    2111 dsatp DSATP
    2112 idonix-metanet Idonix MetaNet
    2113 hsl-storm HSL StoRM
    2114 newheights NEWHEIGHTS
    2115 kdm KDM
    2116 ccowcmr CCOWCMR
    2117 mentaclient MENTACLIENT
    2118 mentaserver MENTASERVER
    2119 gsigatekeeper GSIGATEKEEPER
    2120 qencp Quick Eagle Networks CP
    2121 scientia-ssdb SCIENTIA-SSDB
    2122 caupc-remote CauPC Remote Control
    2123 gtp-control GTP-Control Plane (3GPP)
    2124 elatelink ELATELINK
    2125 lockstep LOCKSTEP
    2126 pktcable-cops PktCable-COPS
    2127 index-pc-wb INDEX-PC-WB
    2128 net-steward Net Steward Control
    2129 cs-live cs-live.com
    2130 swc-xds SWC-XDS
    2131 avantageb2b Avantageb2b
    2132 avail-epmap AVAIL-EPMAP
    2133 zymed-zpp ZYMED-ZPP
    2134 avenue AVENUE
    2135 gris Grid Resource Information Server
    2136 appworxsrv APPWORXSRV
    2137 connect CONNECT
    2138 unbind-cluster UNBIND-CLUSTER
    2139 ias-auth IAS-AUTH
    2140 ias-reg IAS-REG
    2141 ias-admind IAS-ADMIND
    2142 tdm-over-ip TDM-OVER-IP
    2143 lv-jc Live Vault Job Control
    2144 lv-ffx Live Vault Fast Object Transfer
    2145 lv-pici Live Vault Remote Diagnostic Console Support
    2146 lv-not Live Vault Admin Event Notification
    2147 lv-auth Live Vault Authentication
    2148 veritas-ucl VERITAS UNIVERSAL COMMUNICATION LAYER
    2149 acptsys ACPTSYS
    2150 dynamic3d DYNAMIC3D
    2151 docent DOCENT
    2152 gtp-user GTP-User Plane (3GPP)
    2165 x-bone-api X-Bone API
    2166 iwserver IWSERVER
    2180 mc-gt-srv Millicent Vendor Gateway Server
    2181 eforward eforward
    2200 ici ICI
    2201 ats Advanced Training System Program
    2202 imtc-map Int. Multimedia Teleconferencing Cosortium
    2213 kali Kali
    2220 ganymede ganymede
    2221 rockwell-csp1 Rockwell CSP1
    2222 rockwell-csp2 Rockwell CSP2
    2223 rockwell-csp3 Rockwell CSP3
    2232 ivs-video IVS Video default
    2233 infocrypt INFOCRYPT
    2234 directplay DirectPlay
    2235 sercomm-wlink Sercomm-WLink
    2236 nani Nani
    2237 optech-port1-lm Optech Port1 License Manager
    2238 aviva-sna AVIVA SNA SERVER
    2239 imagequery Image Query
    2240 recipe RECIPe
    2241 ivsd IVS Daemon
    2242 foliocorp Folio Remote Server
    2243 magicom Magicom Protocol
    2244 nmsserver NMS Server
    2245 hao HaO
    2250 remote-collab remote-collab
    2255 vrtp VRTP – ViRtue Transfer Protocol
    2279 xmquery xmquery
    2280 lnvpoller LNVPOLLER
    2281 lnvconsole LNVCONSOLE
    2282 lnvalarm LNVALARM
    2283 lnvstatus LNVSTATUS
    2284 lnvmaps LNVMAPS
    2285 lnvmailmon LNVMAILMON
    2286 nas-metering NAS-Metering
    2287 dna DNA
    2288 netml NETML
    2294 konshus-lm Konshus License Manager (FLEX)
    2295 advant-lm Advant License Manager
    2296 theta-lm Theta License Manager (Rainbow)
    2297 d2k-datamover1 D2K DataMover 1
    2298 d2k-datamover2 D2K DataMover 2
    2299 pc-telecommute PC Telecommute
    2300 cvmmon CVMMON
    2301 cpq-wbem Compaq HTTP
    2302 binderysupport Bindery Support
    2303 proxy-gateway Proxy Gateway
    2304 attachmate-uts Attachmate UTS
    2305 mt-scaleserver MT ScaleServer
    2306 tappi-boxnet TAPPI BoxNet
    2307 pehelp pehelp
    2308 sdhelp sdhelp
    2309 sdserver SD Server
    2310 sdclient SD Client
    2311 messageservice Message Service
    2313 iapp IAPP (Inter Access Point Protocol)
    2314 cr-websystems CR WebSystems
    2315 precise-sft Precise Sft.
    2316 sent-lm SENT License Manager
    2317 attachmate-g32 Attachmate G32
    2318 cadencecontrol Cadence Control
    2319 infolibria InfoLibria
    2320 siebel-ns Siebel NS
    2321 rdlap RDLAP over UDP
    2322 ofsd ofsd
    2323 3d-nfsd 3d-nfsd
    2324 cosmocall Cosmocall
    2325 designspace-lm Design Space License Management
    2326 idcp IDCP
    2327 xingcsm xingcsm
    2328 netrix-sftm Netrix SFTM
    2329 nvd NVD
    2330 tscchat TSCCHAT
    2331 agentview AGENTVIEW
    2332 rcc-host RCC Host
    2333 snapp SNAPP
    2334 ace-client ACE Client Auth
    2335 ace-proxy ACE Proxy
    2336 appleugcontrol Apple UG Control
    2337 ideesrv ideesrv
    2338 norton-lambert Norton Lambert
    2339 3com-webview 3Com WebView
    2340 wrs_registry WRS Registry
    2341 xiostatus XIO Status
    2342 manage-exec Seagate Manage Exec
    2343 nati-logos nati logos
    2344 fcmsys fcmsys
    2345 dbm dbm
    2346 redstorm_join Game Connection Port
    2347 redstorm_find Game Announcement and Location
    2348 redstorm_info Information to query for game status
    2349 redstorm_diag Diagnostics Port
    2350 psbserver psbserver
    2351 psrserver psrserver
    2352 pslserver pslserver
    2353 pspserver pspserver
    2354 psprserver psprserver
    2355 psdbserver psdbserver
    2356 gxtelmd GXT License Managemant
    2357 unihub-server UniHub Server
    2358 futrix Futrix
    2359 flukeserver FlukeServer
    2360 nexstorindltd NexstorIndLtd
    2361 tl1 TL1
    2362 digiman digiman
    2363 mediacntrlnfsd Media Central NFSD
    2364 oi-2000 OI-2000
    2365 dbref dbref
    2366 qip-login qip-login
    2367 service-ctrl Service Control
    2368 opentable OpenTable
    2369 acs2000-dsp ACS2000 DSP
    2370 l3-hbmon L3-HBMon
    2381 compaq-https Compaq HTTPS
    2382 ms-olap3 Microsoft OLAP
    2383 ms-olap4 Microsoft OLAP
    2384 sd-request SD-REQUEST
    2389 ovsessionmgr OpenView Session Mgr
    2390 rsmtp RSMTP
    2391 3com-net-mgmt 3COM Net Management
    2392 tacticalauth Tactical Auth
    2393 ms-olap1 MS OLAP 1
    2394 ms-olap2 MS OLAP 2
    2395 lan900_remote LAN900 Remote
    2396 wusage Wusage
    2397 ncl NCL
    2398 orbiter Orbiter
    2399 fmpro-fdal FileMaker, Inc. – Data Access Layer
    2400 opequus-server OpEquus Server
    2401 cvspserver cvspserver
    2402 taskmaster2000 TaskMaster 2000 Server
    2403 taskmaster2000 TaskMaster 2000 Web
    2404 iec870-5-104 IEC870-5-104
    2405 trc-netpoll TRC Netpoll
    2406 jediserver JediServer
    2407 orion Orion
    2408 optimanet OptimaNet
    2409 sns-protocol SNS Protocol
    2410 vrts-registry VRTS Registry
    2411 netwave-ap-mgmt Netwave AP Management
    2412 cdn CDN
    2413 orion-rmi-reg orion-rmi-reg
    2414 beeyond Beeyond
    2415 comtest COMTEST
    2416 rmtserver RMT Server
    2417 composit-server Composit Server
    2418 cas cas
    2419 attachmate-s2s Attachmate S2S
    2420 dslremote-mgmt DSL Remote Management
    2421 g-talk G-Talk
    2422 crmsbits CRMSBITS
    2423 rnrp RNRP
    2424 kofax-svr KOFAX-SVR
    2425 fjitsuappmgr Fujitsu App Manager
    2426 applianttcp Appliant TCP
    2427 mgcp-gateway Media Gateway Control Protocol Gateway
    2428 ott One Way Trip Time
    2429 ft-role FT-ROLE
    2430 venus venus
    2431 venus-se venus-se
    2432 codasrv codasrv
    2433 codasrv-se codasrv-se
    2434 pxc-epmap pxc-epmap
    2435 optilogic OptiLogic
    2436 topx TOP/X
    2437 unicontrol UniControl
    2438 msp MSP
    2439 sybasedbsynch SybaseDBSynch
    2440 spearway Spearway Lockers
    2441 pvsw-inet pvsw-inet
    2442 netangel Netangel
    2443 powerclientcsf PowerClient Central Storage Facility
    2444 btpp2sectrans BT PP2 Sectrans
    2445 dtn1 DTN1
    2446 bues_service bues_service
    2447 ovwdb OpenView NNM daemon
    2448 hpppssvr hpppsvr
    2449 ratl RATL
    2450 netadmin netadmin
    2451 netchat netchat
    2452 snifferclient SnifferClient
    2453 madge-om madge-om
    2454 indx-dds IndX-DDS
    2455 wago-io-system WAGO-IO-SYSTEM
    2456 altav-remmgt altav-remmgt
    2457 rapido-ip Rapido_IP
    2458 griffin griffin
    2459 community Community
    2460 ms-theater ms-theater
    2461 qadmifoper qadmifoper
    2462 qadmifevent qadmifevent
    2463 symbios-raid Symbios Raid
    2464 direcpc-si DirecPC SI
    2465 lbm Load Balance Management
    2466 lbf Load Balance Forwarding
    2467 high-criteria High Criteria
    2468 qip-msgd qip_msgd
    2469 mti-tcs-comm MTI-TCS-COMM
    2470 taskman-port taskman port
    2471 seaodbc SeaODBC
    2472 c3 C3
    2473 aker-cdp Aker-cdp
    2474 vitalanalysis Vital Analysis
    2475 ace-server ACE Server
    2476 ace-svr-prop ACE Server Propagation
    2477 ssm-cvs SecurSight Certificate Valifation Service
    2478 ssm-cssps SecurSight Authentication Server (SLL)
    2479 ssm-els SecurSight Event Logging Server (SSL)
    2480 lingwood Lingwood’s Detail
    2481 giop Oracle GIOP
    2482 giop-ssl Oracle GIOP SSL
    2483 ttc Oracle TTC
    2484 ttc-ssl Oracle TTC SSL
    2485 netobjects1 Net Objects1
    2486 netobjects2 Net Objects2
    2487 pns Policy Notice Service
    2488 moy-corp Moy Corporation
    2489 tsilb TSILB
    2490 qip-qdhcp qip_qdhcp
    2491 conclave-cpp Conclave CPP
    2492 groove GROOVE
    2493 talarian-mqs Talarian MQS
    2494 bmc-ar BMC AR
    2495 fast-rem-serv Fast Remote Services
    2496 dirgis DIRGIS
    2497 quaddb Quad DB
    2498 odn-castraq ODN-CasTraq
    2499 unicontrol UniControl
    2500 rtsserv Resource Tracking system server
    2501 rtsclient Resource Tracking system client
    2502 kentrox-prot Kentrox Protocol
    2503 nms-dpnss NMS-DPNSS
    2504 wlbs WLBS
    2505 torque-traffic torque-traffic
    2506 jbroker jbroker
    2507 spock spock
    2508 jdatastore JDataStore
    2509 fjmpss fjmpss
    2510 fjappmgrbulk fjappmgrbulk
    2511 metastorm Metastorm
    2512 citrixima Citrix IMA
    2513 citrixadmin Citrix ADMIN
    2514 facsys-ntp Facsys NTP
    2515 facsys-router Facsys Router
    2516 maincontrol Main Control
    2517 call-sig-trans H.323 Annex E call signaling transport
    2518 willy Willy
    2519 globmsgsvc globmsgsvc
    2520 pvsw pvsw
    2521 adaptecmgr Adaptec Manager
    2522 windb WinDb
    2523 qke-llc-v3 Qke LLC V.3
    2524 optiwave-lm Optiwave License Management
    2525 ms-v-worlds MS V-Worlds
    2526 ema-sent-lm EMA License Manager
    2527 iqserver IQ Server
    2528 ncr_ccl NCR CCL
    2529 utsftp UTS FTP
    2530 vrcommerce VR Commerce
    2531 ito-e-gui ITO-E GUI
    2532 ovtopmd OVTOPMD
    2533 snifferserver SnifferServer
    2534 combox-web-acc Combox Web Access
    2535 madcap MADCAP
    2536 btpp2audctr1 btpp2audctr1
    2537 upgrade Upgrade Protocol
    2538 vnwk-prapi vnwk-prapi
    2539 vsiadmin VSI Admin
    2540 lonworks LonWorks
    2541 lonworks2 LonWorks2
    2542 davinci daVinci
    2543 reftek REFTEK
    2544 novell-zen Novell ZEN
    2545 sis-emt sis-emt
    2546 vytalvaultbrtp vytalvaultbrtp
    2547 vytalvaultvsmp vytalvaultvsmp
    2548 vytalvaultpipe vytalvaultpipe
    2549 ipass IPASS
    2550 ads ADS
    2551 isg-uda-server ISG UDA Server
    2552 call-logging Call Logging
    2553 efidiningport efidiningport
    2554 vcnet-link-v10 VCnet-Link v10
    2555 compaq-wcp Compaq WCP
    2556 nicetec-nmsvc nicetec-nmsvc
    2557 nicetec-mgmt nicetec-mgmt
    2558 pclemultimedia PCLE Multi Media
    2559 lstp LSTP
    2560 labrat labrat
    2561 mosaixcc MosaixCC
    2562 delibo Delibo
    2563 cti-redwood CTI Redwood
    2564 hp-3000-telnet HP 3000 NS/VT block mode telnet
    2565 coord-svr Coordinator Server
    2566 pcs-pcw pcs-pcw
    2567 clp Cisco Line Protocol
    2568 spamtrap SPAM TRAP
    2569 sonuscallsig Sonus Call Signal
    2570 hs-port HS Port
    2571 cecsvc CECSVC
    2572 ibp IBP
    2573 trustestablish Trust Establish
    2574 blockade-bpsp Blockade BPSP
    2575 hl7 HL7
    2576 tclprodebugger TCL Pro Debugger
    2577 scipticslsrvr Scriptics Lsrvr
    2578 rvs-isdn-dcp RVS ISDN DCP
    2579 mpfoncl mpfoncl
    2580 tributary Tributary
    2581 argis-te ARGIS TE
    2582 argis-ds ARGIS DS
    2583 mon MON
    2584 cyaserv cyaserv
    2585 netx-server NETX Server
    2586 netx-agent NETX Agent
    2587 masc MASC
    2588 privilege Privilege
    2589 quartus-tcl quartus tcl
    2590 idotdist idotdist
    2591 maytagshuffle Maytag Shuffle
    2592 netrek netrek
    2593 mns-mail MNS Mail Notice Service
    2594 dts Data Base Server
    2595 worldfusion1 World Fusion 1
    2596 worldfusion2 World Fusion 2
    2597 homesteadglory Homestead Glory
    2598 citriximaclient Citrix MA Client
    2599 meridiandata Meridian Data
    2600 hpstgmgr HPSTGMGR
    2601 discp-client discp client
    2602 discp-server discp server
    2603 servicemeter Service Meter
    2604 nsc-ccs NSC CCS
    2605 nsc-posa NSC POSA
    2606 netmon Dell Netmon
    2607 connection Dell Connection
    2608 wag-service Wag Service
    2609 system-monitor System Monitor
    2610 versa-tek VersaTek
    2611 lionhead LIONHEAD
    2612 qpasa-agent Qpasa Agent
    2613 smntubootstrap SMNTUBootstrap
    2614 neveroffline Never Offline
    2615 firepower firepower
    2616 appswitch-emp appswitch-emp
    2617 cmadmin Clinical Context Managers
    2618 priority-e-com Priority E-Com
    2619 bruce bruce
    2620 lpsrecommender LPSRecommender
    2621 miles-apart Miles Apart Jukebox Server
    2622 metricadbc MetricaDBC
    2623 lmdp LMDP
    2624 aria Aria
    2625 blwnkl-port Blwnkl Port
    2626 gbjd816 gbjd816
    2627 moshebeeri Moshe Beeri
    2628 dict DICT
    2629 sitaraserver Sitara Server
    2630 sitaramgmt Sitara Management
    2631 sitaradir Sitara Dir
    2632 irdg-post IRdg Post
    2633 interintelli InterIntelli
    2634 pk-electronics PK Electronics
    2635 backburner Back Burner
    2636 solve Solve
    2637 imdocsvc Import Document Service
    2638 sybaseanywhere Sybase Anywhere
    2639 aminet AMInet
    2640 sai_sentlm Sabbagh Associates Licence Manager
    2641 hdl-srv HDL Server
    2642 tragic Tragic
    2643 gte-samp GTE-SAMP
    2644 travsoft-ipx-t Travsoft IPX Tunnel
    2645 novell-ipx-cmd Novell IPX CMD
    2646 and-lm AND Licence Manager
    2647 syncserver SyncServer
    2648 upsnotifyprot Upsnotifyprot
    2649 vpsipport VPSIPPORT
    2650 eristwoguns eristwoguns
    2651 ebinsite EBInSite
    2652 interpathpanel InterPathPanel
    2653 sonus Sonus
    2654 corel_vncadmin Corel VNC Admin
    2655 unglue UNIX Nt Glue
    2656 kana Kana
    2657 sns-dispatcher SNS Dispatcher
    2658 sns-admin SNS Admin
    2659 sns-query SNS Query
    2660 gcmonitor GC Monitor
    2661 olhost OLHOST
    2662 bintec-capi BinTec-CAPI
    2663 bintec-tapi BinTec-TAPI
    2664 command-mq-gm Command MQ GM
    2665 command-mq-pm Command MQ PM
    2666 extensis extensis
    2667 alarm-clock-s Alarm Clock Server
    2668 alarm-clock-c Alarm Clock Client
    2669 toad TOAD
    2670 tve-announce TVE Announce
    2671 newlixreg newlixreg
    2672 nhserver nhserver
    2673 firstcall42 First Call 42
    2674 ewnn ewnn
    2675 ttc-etap TTC ETAP
    2676 simslink SIMSLink
    2677 gadgetgate1way Gadget Gate 1 Way
    2678 gadgetgate2way Gadget Gate 2 Way
    2679 syncserverssl Sync Server SSL
    2680 pxc-sapxom pxc-sapxom
    2681 mpnjsomb mpnjsomb
    2682 srsp SRSP
    2683 ncdloadbalance NCDLoadBalance
    2684 mpnjsosv mpnjsosv
    2685 mpnjsocl mpnjsocl
    2686 mpnjsomg mpnjsomg
    2687 pq-lic-mgmt pq-lic-mgmt
    2688 md-cg-http md-cf-http
    2689 fastlynx FastLynx
    2690 hp-nnm-data HP NNM Embedded Database
    2691 itinternet IT Internet
    2692 admins-lms Admins LMS
    2693 belarc-http belarc-http
    2694 pwrsevent pwrsevent
    2695 vspread VSPREAD
    2696 unifyadmin Unify Admin
    2697 oce-snmp-trap Oce SNMP Trap Port
    2698 mck-ivpip MCK-IVPIP
    2699 csoft-plusclnt Csoft Plus Client
    2700 tqdata tqdata
    2701 sms-rcinfo SMS RCINFO
    2702 sms-xfer SMS XFER
    2703 sms-chat SMS CHAT
    2704 sms-remctrl SMS REMCTRL
    2705 sds-admin SDS Admin
    2706 ncdmirroring NCD Mirroring
    2707 emcsymapiport EMCSYMAPIPORT
    2708 banyan-net Banyan-Net
    2709 supermon Supermon
    2710 sso-service SSO Service
    2711 sso-control SSO Control
    2712 aocp Axapta Object Communication Protocol
    2713 raven1 Raven1
    2714 raven2 Raven2
    2715 hpstgmgr2 HPSTGMGR2
    2716 inova-ip-disco Inova IP Disco
    2717 pn-requester PN REQUESTER
    2718 pn-requester2 PN REQUESTER 2
    2719 scan-change Scan & Change
    2720 wkars wkars
    2721 smart-diagnose Smart Diagnose
    2722 proactivesrvr Proactive Server
    2723 watchdognt WatchDog NT
    2724 qotps qotps
    2725 msolap-ptp2 MSOLAP PTP2
    2726 tams TAMS
    2727 mgcp-callagent Media Gateway Control Protocol Call Agent
    2728 sqdr SQDR
    2729 tcim-control TCIM Control
    2730 nec-raidplus NEC RaidPlus
    2731 netdragon-msngr NetDragon Messanger
    2732 g5m G5M
    2733 signet-ctf Signet CTF
    2734 ccs-software CCS Software
    2735 monitorconsole monitor console
    2736 radwiz-nms-srv RADWIZ NMS SRV
    2737 srp-feedback SRP Feedback
    2738 ndl-tcp-ois-gw NDL TCP-OSI Gateway
    2739 tn-timing TN Timing
    2740 alarm Alarm
    2741 tsb TSB
    2742 tsb2 TSB2
    2743 murx murx
    2744 honyaku honyaku
    2745 urbisnet URBISNET
    2746 cpudpencap CPUDPENCAP
    2752 rsisysaccess RSISYS ACCESS
    2753 de-spot de-spot
    2754 apollo-cc APOLLO CC
    2755 expresspay Express Pay
    2756 simplement-tie simplement-tie
    2757 cnrp CNRP
    2758 apollo-status APOLLO Status
    2759 apollo-gms APOLLO GMS
    2760 sabams Saba MS
    2761 dicom-iscl DICOM ISCL
    2762 dicom-tls DICOM TLS
    2763 desktop-dna Desktop DNA
    2764 data-insurance Data Insurance
    2765 qip-audup qip-audup
    2766 compaq-scp Compaq SCP
    2767 uadtc UADTC
    2768 uacs UACS
    2769 singlept-mvs Single Point MVS
    2770 veronica Veronica
    2771 vergencecm Vergence CM
    2772 auris auris
    2773 pcbakcup1 PC Backup
    2774 pcbakcup2 PC Backup
    2775 smpp SMMP
    2776 ridgeway1 Ridgeway Systems & Software
    2777 ridgeway2 Ridgeway Systems & Software
    2778 gwen-sonya Gwen-Sonya
    2779 lbc-sync LBC Sync
    2780 lbc-control LBC Control
    2781 whosells ResolveNet IOM whosells
    2782 everydayrc everydayrc
    2783 aises AISES
    2784 www-dev world wide web – development
    2785 aic-np aic-np
    2786 aic-oncrpc aic-oncrpc – Destiny MCD database
    2787 piccolo piccolo – Cornerstone Software
    2788 fryeserv NetWare Loadable Module – Seagate Software
    2789 media-agent Media Agent
    2790 plgproxy PLG Proxy
    2791 mtport-regist MT Port Registrator
    2792 f5-globalsite f5-globalsite
    2793 initlsmsad initlsmsad
    2794 aaftp aaftp
    2795 livestats LiveStats
    2796 ac-tech ac-tech
    2797 esp-encap esp-encap
    2798 tmesis-upshot TMESIS-UPShot
    2799 icon-discover ICON Discover
    2800 acc-raid ACC RAID
    2801 igcp IGCP
    2802 veritas-tcp1 Veritas TCP1
    2803 btprjctrl btprjctrl
    2804 telexis-vtu Telexis VTU
    2805 wta-wsp-s WTA WSP-S
    2806 cspuni cspuni
    2807 cspmulti cspmulti
    2808 j-lan-p J-LAN-P
    2809 corbaloc CORBA LOC
    2810 netsteward Active Net Steward
    2811 gsiftp GSI FTP
    2812 atmtcp atmtcp
    2813 llm-pass llm-pass
    2814 llm-csv llm-csv
    2815 lbc-measure LBC Measurement
    2816 lbc-watchdog LBC Watchdog
    2817 nmsigport NMSig Port
    2818 rmlnk rmlnk
    2819 fc-faultnotify FC Fault Notification
    2820 univision UniVision
    2821 vml-dms vml_dms
    2822 ka0wuc ka0wuc
    2823 cqg-netlan CQG Net/LAN
    2826 slc-systemlog slc systemlog
    2827 slc-ctrlrloops slc ctrlrloops
    2828 itm-lm ITM License Manager
    2829 silkp1 silkp1
    2830 silkp2 silkp2
    2831 silkp3 silkp3
    2832 silkp4 silkp4
    2833 glishd glishd
    2834 evtp EVTP
    2835 evtp-data EVTP-DATA
    2836 catalyst catalyst
    2837 repliweb Repliweb
    2838 starbot Starbot
    2839 nmsigport NMSigPort
    2840 l3-exprt l3-exprt
    2841 l3-ranger l3-ranger
    2842 l3-hawk l3-hawk
    2843 pdnet PDnet
    2844 bpcp-poll BPCP POLL
    2845 bpcp-trap BPCP TRAP
    2846 aimpp-hello AIMPP Hello
    2847 aimpp-port-req AIMPP Port Req
    2848 amt-blc-port AMT-BLC-PORT
    2849 fxp FXP
    2850 metaconsole MetaConsole
    2851 webemshttp webemshttp
    2852 bears-01 bears-01
    2853 ispipes ISPipes
    2854 infomover InfoMover
    2856 cesdinv cesdinv
    2857 simctlp SimCtIP
    2858 ecnp ECNP
    2859 activememory Active Memory
    2860 dialpad-voice1 Dialpad Voice 1
    2861 dialpad-voice2 Dialpad Voice 2
    2862 ttg-protocol TTG Protocol
    2863 sonardata Sonar Data
    2864 astromed-main main 5001 cmd
    2865 pit-vpn pit-vpn
    2866 lwlistener lwlistener
    2867 esps-portal esps-portal
    2868 npep-messaging NPEP Messaging
    2869 icslap ICSLAP
    2870 daishi daishi
    2871 msi-selectplay MSI Select Play
    2872 contract CONTRACT
    2873 paspar2-zoomin PASPAR2 ZoomIn
    2874 dxmessagebase1 dxmessagebase1
    2875 dxmessagebase2 dxmessagebase2
    2876 sps-tunnel SPS Tunnel
    2877 bluelance BLUELANCE
    2878 aap AAP
    2879 ucentric-ds ucentric-ds
    2880 synapse synapse
    2881 ndsp NDSP
    2882 ndtp NDTP
    2883 ndnp NDNP
    2884 flashmsg Flash Msg
    2885 topflow TopFlow
    2886 responselogic RESPONSELOGIC
    2887 aironetddp aironet
    2888 spcsdlobby SPCSDLOBBY
    2889 rsom RSOM
    2890 cspclmulti CSPCLMULTI
    2891 cinegrfx-elmd CINEGRFX-ELMD License Manager
    2892 snifferdata SNIFFERDATA
    2893 vseconnector VSECONNECTOR
    2894 abacus-remote ABACUS-REMOTE
    2895 natuslink NATUS LINK
    2896 ecovisiong6-1 ECOVISIONG6-1
    2897 citrix-rtmp Citrix RTMP
    2898 appliance-cfg APPLIANCE-CFG
    2899 powergemplus POWERGEMPLUS
    2900 quicksuite QUICKSUITE
    2901 allstorcns ALLSTORCNS
    2902 netaspi NET ASPI
    2903 suitcase SUITCASE
    2904 m2ua M2UA
    2905 m3ua M3UA
    2906 caller9 CALLER9
    2907 webmethods-b2b WEBMETHODS B2B
    2908 mao mao
    2909 funk-dialout Funk Dialout
    2910 tdaccess TDAccess
    2911 blockade Blockade
    2912 epicon Epicon
    2913 boosterware Booster Ware
    2914 gamelobby Game Lobby
    2915 tksocket TK Socket
    2916 elvin_server Elvin Server
    2917 elvin_client Elvin Client
    2918 kastenchasepad Kasten Chase Pad
    2919 roboer ROBOER
    2920 roboeda ROBOEDA
    2921 cesdcdman CESD Contents Delivery Management
    2922 cesdcdtrn CESD Contents Delivery Data Transfer
    2923 wta-wsp-wtp-s WTA-WSP-WTP-S
    2924 precise-vip PRECISE-VIP
    2925 frp firewall redundancy protocol
    2926 mobile-file-dl MOBILE-FILE-DL
    2927 unimobilectrl UNIMOBILECTRL
    2928 redstone-cpss REDSTONE-CPSS
    2929 panja-webadmin PANJA-WEBADMIN
    2930 panja-weblinx PANJA-WEBLINX
    2931 circle-x Circle-X
    2932 incp INCP
    2933 4-tieropmgw 4-TIER OPM GW
    2934 4-tieropmcli 4-TIER OPM CLI
    2935 qtp QTP
    2936 otpatch OTPatch
    2937 pnaconsult-lm PNACONSULT-LM
    2938 sm-pas-1 SM-PAS-1
    2939 sm-pas-2 SM-PAS-2
    2940 sm-pas-3 SM-PAS-3
    2941 sm-pas-4 SM-PAS-4
    2942 sm-pas-5 SM-PAS-5
    2943 ttnrepository TTNRepository
    2944 megaco-h248 Megaco H-248
    2945 h248-binary H248 Binary
    2946 fjsvmpor FJSVmpor
    2947 gpsd GPSD
    2948 wap-push WAP PUSH
    2949 wap-pushsecure WAP PUSH SECURE
    2950 esip ESIP
    2951 ottp OTTP
    2952 mpfwsas MPFWSAS
    2953 ovalarmsrv OVALARMSRV
    2954 ovalarmsrv-cmd OVALARMSRV-CMD
    2955 csnotify CSNOTIFY
    2956 ovrimosdbman OVRIMOSDBMAN
    2957 jmact5 JAMCT5
    2958 jmact6 JAMCT6
    2959 rmopagt RMOPAGT
    2960 dfoxserver DFOXSERVER
    2961 boldsoft-lm BOLDSOFT-LM
    2962 iph-policy-cli IPH-POLICY-CLI
    2963 iph-policy-adm IPH-POLICY-ADM
    2964 bullant-srap BULLANT SRAP
    2965 bullant-rap BULLANT RAP
    2966 idp-infotrieve IDP-INFOTRIEVE
    2967 ssc-agent SSC-AGENT
    2968 enpp ENPP
    2969 essp ESSP
    2970 index-net INDEX-NET
    2971 netclip Net Clip
    2972 pmsm-webrctl PMSM Webrctl
    2973 svnetworks SV Networks
    2974 signal Signal
    2975 fjmpcm Fujitsu Configuration Management Service
    2976 cns-srv-port CNS Server Port
    2977 ttc-etap-ns TTCs Enterprise Test Access Protocol – NS
    2978 ttc-etap-ds TTCs Enterprise Test Access Protocol – DS
    2979 h263-video H.263 Video Streaming
    2980 wimd Instant Messaging Service
    2981 mylxamport MYLXAMPORT
    2982 iwb-whiteboard IWB-WHITEBOARD
    2983 netplan NETPLAN
    2984 hpidsadmin HPIDSADMIN
    2985 hpidsagent HPIDSAGENT
    2986 stonefalls STONEFALLS
    2987 identify ResolveNet IOM IDENTIFY
    2988 classify ResolveNet IOM CLASSIFY
    2989 zarkov ZARKOV
    2990 boscap BOSCAP
    2991 wkstn-mon WKSTN-MON
    2992 itb301 ITB301
    2993 veritas-vis1 VERITAS VIS1
    2994 veritas-vis2 VERITAS VIS2
    2995 idrs IDRS
    2996 vsixml vsixml
    2997 rebol REBOL
    2998 realsecure Real Secure
    2999 remoteware-un RemoteWare Unassigned
    3000 hbci HBCI
    3001 redwood-broker Redwood Broker
    3002 exlm-agent EXLM Agent
    3003 cgms CGMS
    3004 csoftragent Csoft Agent
    3005 geniuslm Genius License Manager
    3006 ii-admin Instant Internet Admin
    3007 lotusmtap Lotus Mail Tracking Agent Protocol
    3008 midnight-tech Midnight Technologies
    3009 pxc-ntfy PXC-NTFY
    3010 gw Telerate Workstation
    3011 trusted-web Trusted Web
    3012 twsdss Trusted Web Client
    3013 gilatskysurfer Gilat Sky Surfer
    3014 broker_service Broker Service
    3015 nati-dstp NATI DSTP
    3016 notify_srvr Notify Server
    3017 event_listener Event Listener
    3018 srvc_registry Service Registry
    3019 resource_mgr Resource Manager
    3020 cifs CIFS
    3021 agriserver AGRI Server
    3022 csregagent CSREGAGENT
    3023 magicnotes magicnotes
    3024 nds_sso NDS_SSO
    3025 arepa-raft Arepa Raft
    3026 agri-gateway AGRI Gateway
    3027 LiebDevMgmt_C LiebDevMgmt_C
    3028 LiebDevMgmt_DM LiebDevMgmt_DM
    3029 LiebDevMgmt_A LiebDevMgmt_A
    3030 arepa-cas Arepa Cas
    3031 agentvu AgentVU
    3032 redwood-chat Redwood Chat
    3033 pdb PDB
    3034 osmosis-aeea Osmosis AEEA
    3035 fjsv-gssagt FJSV gssagt
    3036 hagel-dump Hagel DUMP
    3037 hp-san-mgmt HP SAN Mgmt
    3038 santak-ups Santak UPS
    3039 cogitate Cogitate, Inc.
    3040 tomato-springs Tomato Springs
    3041 di-traceware di-traceware
    3042 journee journee
    3043 brp BRP
    3045 responsenet ResponseNet
    3046 di-ase di-ase
    3047 hlserver Fast Security HL Server
    3048 pctrader Sierra Net PC Trader
    3049 nsws NSWS
    3050 gds_db gds_db
    3051 galaxy-server Galaxy Server
    3052 apcpcns APCPCNS
    3053 dsom-server dsom-server
    3054 amt-cnf-prot AMT CNF PROT
    3055 policyserver Policy Server
    3056 cdl-server CDL Server
    3057 goahead-fldup GoAhead FldUp
    3058 videobeans videobeans
    3059 qsoft qsoft
    3060 interserver interserver
    3061 cautcpd cautcpd
    3062 ncacn-ip-tcp ncacn-ip-tcp
    3063 ncadg-ip-udp ncadg-ip-udp
    3064 distrib-net-proxy stupid closed source distributed.net project proxy port
    3065 slinterbase slinterbase
    3066 netattachsdmp NETATTACHSDMP
    3067 fjhpjp FJHPJP
    3068 ls3bcast ls3 Broadcast
    3069 ls3 ls3
    3070 mgxswitch MGXSWITCH
    3075 orbix-locator Orbix 2000 Locator
    3076 orbix-config Orbix 2000 Config
    3077 orbix-loc-ssl Orbix 2000 Locator SSL
    3078 orbix-cfg-ssl Orbix 2000 Locator SSL
    3079 lv-frontpanel LV Front Panel
    3080 stm_pproc stm_pproc
    3081 tl1-lv TL1-LV
    3082 tl1-raw TL1-RAW
    3083 tl1-telnet TL1-TELNET
    3084 itm-mccs ITM-MCCS
    3085 pcihreq PCIHReq
    3086 jdl-dbkitchen JDL-DBKitchen
    3100 opcon-xps OpCon/xps
    3105 cardbox Cardbox
    3106 cardbox-http Cardbox HTTP
    3128 squid-http squid-http 3128/tcp
    3129 trojan Masters Paradise Trojan
    3130 icpv2 ICPv2
    3131 netbookmark Net Book Mark
    3141 vmodem VMODEM
    3142 rdc-wh-eos RDC WH EOS
    3143 seaview Sea View
    3144 tarantella Tarantella
    3145 csi-lfap CSI-LFAP
    3147 rfio RFIO
    3148 nm-game-admin NetMike Game Administrator
    3149 nm-game-server NetMike Game Server
    3150 nm-asses-admin NetMike Assessor Administrator
    3151 nm-assessor NetMike Assessor
    3180 mc-brk-srv Millicent Broker Server
    3181 bmcpatrolagent BMC Patrol Agent
    3182 bmcpatrolrnvu BMC Patrol Rendezvous
    3262 necp NECP
    3264 ccmail cc:mail/lotus
    3265 altav-tunnel Altav Tunnel
    3266 ns-cfg-server NS CFG Server
    3267 ibm-dial-out IBM Dial Out
    3268 msft-gc Microsoft Global Catalog
    3269 msft-gc-ssl Microsoft Global Catalog with LDAP/SSL
    3270 verismart Verismart
    3271 csoft-prev CSoft Prev Port
    3272 user-manager Fujitsu User Manager
    3273 sxmp Simple Extensible Multiplexed Protocol
    3274 ordinox-server Ordinox Server
    3275 samd SAMD
    3276 maxim-asics Maxim ASICs
    3277 awg-proxy AWG Proxy
    3278 lkcmserver LKCM Server
    3279 admind admind
    3280 vs-server VS Server
    3281 sysopt SYSOPT
    3282 datusorb Datusorb
    3283 net-assistant Net Assistant
    3284 4talk 4Talk
    3285 plato Plato
    3286 e-net E-Net
    3287 directvdata DIRECTVDATA
    3288 cops COPS
    3289 enpc ENPC
    3290 caps-lm CAPS LOGISTICS TOOLKIT – LM
    3291 sah-lm S A Holditch & Associates – LM
    3292 cart-o-rama Cart O Rama
    3293 fg-fps fg-fps
    3294 fg-gip fg-gip
    3295 dyniplookup Dynamic IP Lookup
    3296 rib-slm Rib License Manager
    3297 cytel-lm Cytel License Manager
    3298 transview Transview
    3299 pdrncs pdrncs
    3302 mcs-fastmail MCS Fastmail
    3303 opsession-clnt OP Session Client
    3304 opsession-srvr OP Session Server
    3305 odette-ftp ODETTE-FTP
    3306 mysql MySQL
    3307 opsession-prxy OP Session Proxy
    3308 tns-server TNS Server
    3309 tns-adv TNS ADV
    3310 dyna-access Dyna Access
    3311 mcns-tel-ret MCNS Tel Ret
    3312 appman-server Application Management Server
    3313 uorb Unify Object Broker
    3314 uohost Unify Object Host
    3315 cdid CDID
    3316 aicc-cmi AICC/CMI
    3317 vsaiport VSAI PORT
    3318 ssrip Swith to Swith Routing Information Protocol
    3319 sdt-lmd SDT License Manager
    3320 officelink2000 Office Link 2000
    3321 vnsstr VNSSTR
    3322 active-net active networks
    3323 active-net active networks
    3324 active-net active networks
    3325 active-net active networks
    3326 sftu SFTU
    3327 bbars BBARS
    3328 egptlm Eaglepoint License Manager
    3329 hp-device-disc HP Device Disc
    3330 mcs-calypsoicf MCS Calypso ICF
    3331 mcs-messaging MCS Messaging
    3332 mcs-mailsvr MCS Mail Server
    3333 dec-notes DEC Notes
    3334 directv-web Direct TV Webcasting
    3335 directv-soft Direct TV Software Updates
    3336 directv-tick Direct TV Tickers
    3337 directv-catlg Direct TV Data Catalog
    3338 anet-b OMF data b
    3339 anet-l OMF data l
    3340 anet-m OMF data m
    3341 anet-h OMF data h
    3342 webtie WebTIE
    3343 ms-cluster-net MS Cluster Net
    3344 bnt-manager BNT Manager
    3345 influence Influence
    3346 trnsprntproxy Trnsprnt Proxy
    3347 phoenix-rpc Phoenix RPC
    3348 pangolin-laser Pangolin Laser
    3349 chevinservices Chevin Services
    3350 findviatv FINDVIATV
    3351 btrieve BTRIEVE
    3352 ssql SSQL
    3353 fatpipe FATPIPE
    3354 suitjd SUITJD
    3355 ordinox-dbase Ordinox Dbase
    3356 upnotifyps UPNOTIFYPS
    3357 adtech-test Adtech Test IP
    3358 mpsysrmsvr Mp Sys Rmsvr
    3359 wg-netforce WG NetForce
    3360 kv-server KV Server
    3361 kv-agent KV Agent
    3362 dj-ilm DJ ILM
    3363 nati-vi-server NATI Vi Server
    3364 creativeserver Creative Server
    3365 contentserver Content Server
    3366 creativepartnr Creative Partner
    3367 satvid-datalnk satellite video data link
    3368 satvid-datalnk satellite video data link
    3369 satvid-datalnk satellite video data link
    3370 satvid-datalnk satellite video data link
    3371 satvid-datalnk satellite video data link
    3372 tip2 TIP 2
    3373 lavenir-lm Lavenir License Manager
    3374 cluster-disc Cluster Disc
    3375 vsnm-agent VSNM Agent
    3376 cdborker CD Broker
    3377 cogsys-lm Cogsys Network License Manager
    3378 wsicopy WSICOPY
    3379 socorfs SOCORFS
    3380 sns-channels SNS Channels
    3381 geneous Geneous
    3382 fujitsu-neat Fujitsu Network Enhanced Antitheft function
    3383 esp-lm Enterprise Software Products License Manager
    3384 hp-clic Cluster Management Services
    3385 qnxnetman qnxnetman
    3386 gprs-data GPRS Data
    3387 backroomnet Back Room Net
    3388 cbserver CB Server
    3389 ms-wbt-server MS WBT Server
    3390 dsc Distributed Service Coordinator
    3391 savant SAVANT
    3392 efi-lm EFI License Management
    3393 d2k-tapestry1 D2K Tapestry Client to Server
    3394 d2k-tapestry2 D2K Tapestry Server to Server
    3395 dyna-lm Dyna License Manager (Elam)
    3396 printer_agent Printer Agent
    3397 cloanto-lm Cloanto License Manager
    3398 mercantile Mercantile
    3399 csms CSMS
    3400 csms2 CSMS2
    3401 filecast filecast
    3421 bmap Bull Apprise portmapper
    3454 mira Apple Remote Access Protocol
    3455 prsvp RSVP Port
    3456 vat VAT default data
    3457 vat-control VAT default control
    3458 d3winosfi D3WinOsfi
    3459 integral TIP Integral
    3460 edm-manager EDM Manger
    3461 edm-stager EDM Stager
    3462 edm-std-notify EDM STD Notify
    3463 edm-adm-notify EDM ADM Notify
    3464 edm-mgr-sync EDM MGR Sync
    3465 edm-mgr-cntrl EDM MGR Cntrl
    3466 workflow WORKFLOW
    3467 rcst RCST
    3468 ttcmremotectrl TTCM Remote Controll
    3469 pluribus Pluribus
    3470 jt400 jt400
    3471 jt400-ssl jt400-ssl
    3535 ms-la MS-LA
    3563 watcomdebug Watcom Debug
    3672 harlequinorb harlequinorb
    3700 trojan Portal of Doom Trojan
    3802 vhd VHD
    3845 v-one-spp V-ONE Single Port Proxy
    3862 giga-pocket GIGA-POCKET
    3875 pnbscada PNBSCADA
    3900 udt_os Unidata UDT OS
    3984 mapper-nodemgr MAPPER network node manager
    3985 mapper-mapethd MAPPER TCP/IP server
    3986 mapper-ws_ethd MAPPER workstation server
    3987 centerline Centerline
    4000 terabase Terabase
    4001 newoak NewOak
    4002 pxc-spvr-ft pxc-spvr-ft
    4003 pxc-splr-ft pxc-splr-ft
    4004 pxc-roid pxc-roid
    4005 pxc-pin pxc-pin
    4006 pxc-spvr pxc-spvr
    4007 pxc-splr pxc-splr
    4008 netcheque NetCheque accounting
    4009 chimera-hwm Chimera HWM
    4010 samsung-unidex Samsung Unidex
    4011 altserviceboot Alternate Service Boot
    4012 pda-gate PDA Gate
    4013 acl-manager ACL Manager
    4014 taiclock TAICLOCK
    4015 talarian-mcast1 Talarian Mcast
    4016 talarian-mcast2 Talarian Mcast
    4017 talarian-mcast3 Talarian Mcast
    4018 talarian-mcast4 Talarian Mcast
    4019 talarian-mcast5 Talarian Mcast
    4042 ldxp LDXP
    4045 lockd lockd 4045/tcp
    4092 trojan WinCrash Trojan
    4096 bre BRE (Bridge Relay Element)
    4097 patrolview Patrol View
    4098 drmsfsd drmsfsd
    4099 dpcp DPCP
    4132 nuts_dem NUTS Daemon
    4133 nuts_bootp NUTS Bootp Server
    4134 nifty-hmi NIFTY-Serve HMI protocol
    4141 oirtgsvc Workflow Server
    4142 oidocsvc Document Server
    4143 oidsr Document Replication
    4144 wincim pc windows compuserve.com protocol
    4160 jini-discovery Jini Discovery
    4199 eims-admin EIMS ADMIN
    4200 vrml-multi-use vrml multi user systems
    4201 vrml-multi-use vrml multi user systems
    4202 vrml-multi-use vrml multi user systems
    4203 vrml-multi-use vrml multi user systems
    4204 vrml-multi-use vrml multi user systems
    4205 vrml-multi-use vrml multi user systems
    4206 vrml-multi-use vrml multi user systems
    4207 vrml-multi-use vrml multi user systems
    4208 vrml-multi-use vrml multi user systems
    4209 vrml-multi-use vrml multi user systems
    4210 vrml-multi-use vrml multi user systems
    4211 vrml-multi-use vrml multi user systems
    4212 vrml-multi-use vrml multi user systems
    4213 vrml-multi-use vrml multi user systems
    4214 vrml-multi-use vrml multi user systems
    4215 vrml-multi-use vrml multi user systems
    4216 vrml-multi-use vrml multi user systems
    4217 vrml-multi-use vrml multi user systems
    4218 vrml-multi-use vrml multi user systems
    4219 vrml-multi-use vrml multi user systems
    4220 vrml-multi-use vrml multi user systems
    4221 vrml-multi-use vrml multi user systems
    4222 vrml-multi-use vrml multi user systems
    4223 vrml-multi-use vrml multi user systems
    4224 vrml-multi-use vrml multi user systems
    4225 vrml-multi-use vrml multi user systems
    4226 vrml-multi-use vrml multi user systems
    4227 vrml-multi-use vrml multi user systems
    4228 vrml-multi-use vrml multi user systems
    4229 vrml-multi-use vrml multi user systems
    4230 vrml-multi-use vrml multi user systems
    4231 vrml-multi-use vrml multi user systems
    4232 vrml-multi-use vrml multi user systems
    4233 vrml-multi-use vrml multi user systems
    4234 vrml-multi-use vrml multi user systems
    4235 vrml-multi-use vrml multi user systems
    4236 vrml-multi-use vrml multi user systems
    4237 vrml-multi-use vrml multi user systems
    4238 vrml-multi-use vrml multi user systems
    4239 vrml-multi-use vrml multi user systems
    4240 vrml-multi-use vrml multi user systems
    4241 vrml-multi-use vrml multi user systems
    4242 vrml-multi-use vrml multi user systems
    4243 vrml-multi-use vrml multi user systems
    4244 vrml-multi-use vrml multi user systems
    4245 vrml-multi-use vrml multi user systems
    4246 vrml-multi-use vrml multi user systems
    4247 vrml-multi-use vrml multi user systems
    4248 vrml-multi-use vrml multi user systems
    4249 vrml-multi-use vrml multi user systems
    4250 vrml-multi-use vrml multi user systems
    4251 vrml-multi-use vrml multi user systems
    4252 vrml-multi-use vrml multi user systems
    4253 vrml-multi-use vrml multi user systems
    4254 vrml-multi-use vrml multi user systems
    4255 vrml-multi-use vrml multi user systems
    4256 vrml-multi-use vrml multi user systems
    4257 vrml-multi-use vrml multi user systems
    4258 vrml-multi-use vrml multi user systems
    4259 vrml-multi-use vrml multi user systems
    4260 vrml-multi-use vrml multi user systems
    4261 vrml-multi-use vrml multi user systems
    4262 vrml-multi-use vrml multi user systems
    4263 vrml-multi-use vrml multi user systems
    4264 vrml-multi-use vrml multi user systems
    4265 vrml-multi-use vrml multi user systems
    4266 vrml-multi-use vrml multi user systems
    4267 vrml-multi-use vrml multi user systems
    4268 vrml-multi-use vrml multi user systems
    4269 vrml-multi-use vrml multi user systems
    4270 vrml-multi-use vrml multi user systems
    4271 vrml-multi-use vrml multi user systems
    4272 vrml-multi-use vrml multi user systems
    4273 vrml-multi-use vrml multi user systems
    4274 vrml-multi-use vrml multi user systems
    4275 vrml-multi-use vrml multi user systems
    4276 vrml-multi-use vrml multi user systems
    4277 vrml-multi-use vrml multi user systems
    4278 vrml-multi-use vrml multi user systems
    4279 vrml-multi-use vrml multi user systems
    4280 vrml-multi-use vrml multi user systems
    4281 vrml-multi-use vrml multi user systems
    4282 vrml-multi-use vrml multi user systems
    4283 vrml-multi-use vrml multi user systems
    4284 vrml-multi-use vrml multi user systems
    4285 vrml-multi-use vrml multi user systems
    4286 vrml-multi-use vrml multi user systems
    4287 vrml-multi-use vrml multi user systems
    4288 vrml-multi-use vrml multi user systems
    4289 vrml-multi-use vrml multi user systems
    4290 vrml-multi-use vrml multi user systems
    4291 vrml-multi-use vrml multi user systems
    4292 vrml-multi-use vrml multi user systems
    4293 vrml-multi-use vrml multi user systems
    4294 vrml-multi-use vrml multi user systems
    4295 vrml-multi-use vrml multi user systems
    4296 vrml-multi-use vrml multi user systems
    4297 vrml-multi-use vrml multi user systems
    4298 vrml-multi-use vrml multi user systems
    4299 vrml-multi-use vrml multi user systems
    4300 corelccam Corel CCam
    4321 rwhois Remote Who Is
    4333 msql mini-sql server
    4343 unicall UNICALL
    4344 vinainstall VinaInstall
    4345 m4-network-as Macro 4 Network AS
    4346 elanlm ELAN LM
    4347 lansurveyor LAN Surveyor
    4348 itose ITOSE
    4349 fsportmap File System Port Map
    4350 net-device Net Device
    4351 plcy-net-svcs PLCY Net Services
    4353 f5-iquery F5 iQuery
    4442 saris Saris
    4443 pharos Pharos
    4444 krb524 KRB524
    4445 upnotifyp UPNOTIFYP
    4446 n1-fwp N1-FWP
    4447 n1-rmgmt N1-RMGMT
    4448 asc-slmd ASC Licence Manager
    4449 privatewire PrivateWire
    4450 camp Camp
    4451 ctisystemmsg CTI System Msg
    4452 ctiprogramload CTI Program Load
    4453 nssalertmgr NSS Alert Manager
    4454 nssagentmgr NSS Agent Manager
    4455 prchat-user PR Chat User
    4456 prchat-server PR Chat Server
    4457 prRegister PR Register
    4500 sae-urn sae-urn
    4501 urn-x-cdchoice urn-x-cdchoice
    4545 worldscores WorldScores
    4546 sf-lm SF License Manager (Sentinel)
    4547 lanner-lm Lanner License Manager
    4557 fax flexfax fax transmission service, fax transmission service
    4559 hylafax hylafax client-server protocol
    4567 tram TRAM
    4568 bmc-reporting BMC Reporting
    4590 trojan ICQTrojan Trojan
    4600 piranha1 Piranha1
    4601 piranha2 Piranha2
    4672 rfa remote file access server
    4800 iims Icona Instant Messenging System
    4801 iwec Icona Web Embedded Chat
    4802 ilss Icona License System Server
    4827 htcp HTCP
    4837 varadero-0 Varadero-0
    4838 varadero-1 Varadero-1
    4868 phrelay Photon Relay
    4869 phrelaydbg Photon Relay Debug
    4885 abbs ABBS
    4950 trojan ICQTrojan Trojan
    4983 att-intercom AT&T Intercom
    5002 rfe radio free ethernet
    5003 fmpro-internal FileMaker, Inc. – Proprietary transport
    5004 avt-profile-1 avt-profile-1
    5005 avt-profile-2 avt-profile-2
    5006 wsm-server wsm server
    5007 wsm-server-ssl wsm server ssl
    5010 telelpathstart TelepathStart
    5011 telelpathattack TelepathAttack
    5020 zenginkyo-1 zenginkyo-1
    5021 zenginkyo-2 zenginkyo-2
    5042 asnaacceler8db asnaacceler8db
    5050 mmcc multimedia conference control tool
    5051 ita-agent ITA Agent
    5052 ita-manager ITA Manager
    5055 unot UNOT
    5056 intecom-ps1 Intecom PS 1
    5057 intecom-ps2 Intecom PS 2
    5060 sip SIP
    5061 sip-tls SIP-TLS
    5066 stanag-5066 STANAG-5066-SUBNET-INTF
    5069 i-net-2000-npr I/Net 2000-NPR
    5071 powerschool PowerSchool
    5093 sentinel-lm Sentinel LM
    5099 sentlm-srv2srv SentLM Srv2Srv
    5145 rmonitor_secure RMONITOR SECURE
    5150 atmp Ascend Tunnel Management Protocol
    5151 esri_sde ESRI SDE Instance
    5152 sde-discovery ESRI SDE Instance Discovery
    5165 ife_icorp ife_1corp
    5190 aol America-Online
    5191 aol-1 AmericaOnline1
    5192 aol-2 AmericaOnline2
    5193 aol-3 AmericaOnline3
    5200 targus-aib1 targus aib 1
    5201 targus-aib2 targus aib 2
    5202 targus-getdata2 TARGUS GetData 2
    5203 targus-getdata3 TARGUS GetData 3
    5232 sgi-dgl sgi distributed graphics
    5272 pk PK
    5300 hacl-hb HA cluster heartbeat
    5301 hacl-gs HA cluster general services
    5302 hacl-cfg HA cluster configuration
    5303 hacl-probe HA cluster probing
    5304 hacl-local
    5305 hacl-test
    5306 sun-mc-grp Sun MC Group
    5307 sco-aip SCO AIP
    5308 cfengine CFengine
    5309 jprinter J Printer
    5310 outlaws Outlaws
    5311 tmlogin TM Login
    5314 opalis-rbt-ipc opalis-rbt-ipc
    5321 trojan Firehotcker Trojan
    5400 excerpt Excerpt Search
    5401 excerpts Excerpt Search Secure
    5402 mftp MFTP
    5403 hpoms-ci-lstn HPOMS-CI-LSTN
    5404 hpoms-dps-lstn HPOMS-DPS-LSTN
    5405 netsupport NetSupport
    5406 systemics-sox Systemics Sox
    5407 foresyte-clear Foresyte-Clear
    5408 foresyte-sec Foresyte-Sec
    5409 salient-dtasrv Salient Data Server
    5410 salient-usrmgr Salient User Manager
    5411 actnet ActNet
    5412 continuus Continuus
    5413 wwiotalk WWIOTALK
    5414 statusd StatusD
    5415 ns-server NS Server
    5416 sns-gateway SNS Gateway
    5417 sns-agent SNS Agent
    5418 mcntp MCNTP
    5419 dj-ice DJ-ICE
    5420 cylink-c Cylink-C
    5421 netsupport2 Net Support 2
    5422 salient-mux Salient MUX
    5423 virtualuser VIRTUALUSER
    5426 devbasic DEVBASIC
    5427 sco-peer-tta SCO-PEER-TTA
    5428 telaconsole TELACONSOLE
    5429 base Billing and Accounting System Exchange
    5430 radec-corp RADEC CORP
    5431 park-agent PARK AGENT
    5432 postgres postgres database server
    5435 dttl Data Tunneling Transceiver Linking (DTTL)
    5454 apc-tcp-udp-4 apc-tcp-udp-4
    5455 apc-tcp-udp-5 apc-tcp-udp-5
    5456 apc-tcp-udp-6 apc-tcp-udp-6
    5461 silkmeter SILKMETER
    5462 ttl-publisher TTL Publisher
    5465 netops-broker NETOPS-BROKER
    5500 fcp-addr-srvr1 fcp-addr-srvr1
    5501 fcp-addr-srvr2 fcp-addr-srvr2
    5502 fcp-srvr-inst1 fcp-srvr-inst1
    5503 fcp-srvr-inst2 fcp-srvr-inst2
    5504 fcp-cics-gw1 fcp-cics-gw1
    5510 secureidprop ace/server services
    5520 sdlog ace/server services
    5530 sdserv ace/server services
    5540 sdreport ace/server services
    5550 sdadmind ace/server services
    5554 sgi-esphttp SGI ESP HTTP
    5555 personal-agent Personal Agent
    5566 udpplus UDPPlus
    5569 trojan Robo-Hack Trojan
    5599 esinstall Enterprise Security Remote Install
    5600 esmmanager Enterprise Security Manager
    5601 esmagent Enterprise Security Agent
    5602 a1-msc A1-MSC
    5603 a1-bs A1-BS
    5604 a3-sdunode A3-SDUNode
    5605 a4-sdunode A4-SDUNode
    5631 pcanywheredata pcANYWHEREdata
    5632 pcanywherestat pcANYWHEREstat
    5678 rrac Remote Replication Agent Connection
    5679 dccm Direct Cable Connect Manager
    5680 canna canna (japanese input), kana->kanji server
    5713 proshareaudio proshare conf audio
    5714 prosharevideo proshare conf video
    5715 prosharedata proshare conf data
    5716 prosharerequest proshare conf request
    5717 prosharenotify proshare conf notify
    5729 openmail Openmail User Agent Layer
    5730 unieng netscape suiteware
    5731 unisnc netscape suiteware
    5732 unidas netscape suiteware
    5741 ida-discover1 IDA Discover Port 1
    5742 ida-discover2 IDA Discover Port 2
    5745 fcopy-server fcopy-server
    5746 fcopys-server fcopys-server
    5755 openmailg OpenMail Desk Gateway server
    5757 x500ms OpenMail X.500 Directory Server
    5766 openmailns OpenMail NewMail Server
    5767 s-openmail OpenMail Suer Agent Layer (Secure)
    5768 openmailpxy OpenMail CMTS Server
    5771 netagent NetAgent
    5800 vnc vnc 5800/tcp
    5801 vnc vnc 5801/tcp
    5813 icmpd ICMPD
    5859 wherehoo WHEREHOO
    5900 vnc virtual network computer, orl virtual network client
    5901 vnc-1 virtual network computer display :1
    5902 vnc-2 virtual network computer display :2
    5968 mppolicy-v5 mppolicy-v5
    5969 mppolicy-mgr mppolicy-mgr
    5977 ncd-pref-tcp ncd preferences tcp port
    5978 ncd-diag-tcp ncd diagnostic tcp port
    5979 ncd-conf-tcp ncd configuration tcp port
    5997 ncd-pref ncd preferences telnet port
    5998 ncd-diag ncd diagnostic telnet port
    5999 cvsup CVSup
    6000 x11 x window system, x window server, x-windows server
    6001 x11 x window system, x window server, x-windows server
    6002 x11 x window system, x window server, x-windows server
    6003 x11 x window system, x window server, x-windows server
    6004 x11 x window system, x window server, x-windows server
    6005 x11 x window system, x window server, x-windows server
    6006 x11 x window system, x window server, x-windows server
    6007 x11 x window system, x window server, x-windows server
    6008 x11 x window system, x window server
    6009 x11 x window system, x window server
    6010 x11 x window system
    6011 x11 x window system
    6012 x11 x window system
    6013 x11 x window system
    6014 x11 x window system
    6015 x11 x window system
    6016 x11 x window system
    6017 x11 x window system
    6018 x11 x window system
    6019 x11 x window system
    6020 x11 x window system
    6021 x11 x window system
    6022 x11 x window system
    6023 x11 x window system
    6024 x11 x window system
    6025 x11 x window system
    6026 x11 x window system
    6027 x11 x window system
    6028 x11 x window system
    6029 x11 x window system
    6030 x11 x window system
    6031 x11 x window system
    6032 x11 x window system
    6033 x11 x window system
    6034 x11 x window system
    6035 x11 x window system
    6036 x11 x window system
    6037 x11 x window system
    6038 x11 x window system
    6039 x11 x window system
    6040 x11 x window system
    6041 x11 x window system
    6042 x11 x window system
    6043 x11 x window system
    6044 x11 x window system
    6045 x11 x window system
    6046 x11 x window system
    6047 x11 x window system
    6048 x11 x window system
    6049 x11 x window system
    6050 x11 x window system
    6051 x11 x window system
    6052 x11 x window system
    6053 x11 x window system
    6054 x11 x window system
    6055 x11 x window system
    6056 x11 x window system
    6057 x11 x window system
    6058 x11 x window system
    6059 x11 x window system
    6060 x11 x window system
    6061 x11 x window system
    6062 x11 x window system
    6063 x11 x window system
    6064 ndl-ahp-svc NDL-AHP-SVC
    6065 winpharaoh WinPharaoh
    6066 ewctsp EWCTSP
    6067 srb SRB
    6068 gsmp GSMP
    6069 trip TRIP
    6070 messageasap Messageasap
    6071 ssdtp SSDTP
    6072 diagnose-proc DIAGNOSE-PROC
    6073 directplay8 DirectPlay8
    6100 synchronet-db SynchroNet-db
    6101 synchronet-rtc SynchroNet-rtc
    6102 synchronet-upd SynchroNet-upd
    6103 rets RETS
    6104 dbdb DBDB
    6105 primaserver Prima Server
    6106 mpsserver MPS Server
    6107 etc-control ETC Control
    6108 sercomm-scadmin Sercomm-SCAdmin
    6109 globecast-id GLOBECAST-ID
    6110 softcm HP SoftBench CM
    6111 spc HP SoftBench Sub-Process Control
    6112 dtspcd dtspcd
    6123 backup-express Backup Express
    6141 meta-corp Meta Corporation License Manager
    6142 aspentec-lm Aspen Technology License Manager
    6143 watershed-lm Watershed License Manager
    6144 statsci1-lm StatSci License Manager – 1
    6145 statsci2-lm StatSci License Manager – 2
    6146 lonewolf-lm Lone Wolf Systems License Manager
    6147 montage-lm Montage License Manager
    6148 ricardo-lm Ricardo North America License Manager
    6149 tal-pod tal-pod
    6253 crip CRIP
    6300 bmc-grx BMC GRX
    6321 emp-server1 Empress Software Connectivity Server 1
    6322 emp-server2 Empress Software Connectivity Server 2
    6346 gnutella gnutella, the gnu napster
    6347 gnutella-rtr gnutella-rtr
    6389 clariion-evr01 clariion-evr01
    6400 info-aps info-aps 6400/tcp
    6401 info-was info-was 6401/tcp
    6402 info-eventsvr info-eventsvr 6402/tcp
    6403 info-cachesvr info-cachesvr 6403/tcp
    6404 info-filesvr info-filesvr 6404/tcp
    6405 info-pagesvr info-pagesvr 6405/tcp
    6406 info-processvr info-processvr 6406/tcp
    6407 reserved1 reserved1 6407/tcp
    6408 reserved2 reserved2 6408/tcp
    6409 reserved3 reserved3 6409/tcp
    6410 reserved4 reserved4 6410/tcp
    6455 skip-cert-recv SKIP Certificate Receive
    6456 skip-cert-send SKIP Certificate Send
    6471 lvision-lm LVision License Manager
    6500 boks BoKS Master
    6501 boks_servc BoKS Servc
    6502 boks_servm BoKS Servm
    6503 boks_clntd BoKS Clntd
    6505 badm_priv BoKS Admin Private Port
    6506 badm_pub BoKS Admin Public Port
    6507 bdir_priv BoKS Dir Server, Private Port
    6508 bdir_pub BoKS Dir Server, Public Port
    6547 apc-tcp-udp-1 apc-tcp-udp-1
    6548 apc-tcp-udp-2 apc-tcp-udp-2
    6549 apc-tcp-udp-3 apc-tcp-udp-3
    6550 fg-sysupdate fg-sysupdate
    6558 xdsxdm
    6665 ircu ircu
    6666 ircu ircu, internet relay chat server
    6667 ircu often used irc port (also see 194), ircu, internet relay chat
    6668 ircu ircu, internet relay chat
    6670 vocaltec-gold Vocaltec Global Online Directory
    6671 trojan Deep Throat Trojan
    6672 vision_server vision_server
    6673 vision_elmd vision_elmd
    6701 kti-icad-srvr KTI/ICAD Nameserver
    6714 ibprotocol Internet Backplane Protocol
    6767 bmc-perf-agent BMC PERFORM AGENT
    6768 bmc-perf-mgrd BMC PERFORM MGRD
    6776 trojan BackDoor-G, SubSeven trojans
    6790 hnmp HNMP
    6831 ambit-lm ambit-lm
    6841 netmo-default Netmo Default
    6842 netmo-http Netmo HTTP
    6850 iccrushmore ICCRUSHMORE
    6888 muse MUSE
    6939 trojan GateCrasher, Priority
    6961 jmact3 JMACT3
    6962 jmevt2 jmevt2
    6963 swismgr1 swismgr1
    6964 swismgr2 swismgr2
    6965 swistrap swistrap
    6966 swispol swispol
    6969 acmsoda acmsoda
    6998 iatp-highpri IATP-highPri
    6999 iatp-normalpri IATP-normalPri
    7000 afs3-fileserver file server itself
    7001 afs3-callback callbacks to cache managers
    7002 afs3-prserver users & groups database
    7003 afs3-vlserver volume location database
    7004 afs3-kaserver AFS/Kerberos authentication service
    7005 afs3-volser volume managment server
    7006 afs3-errors error interpretation service
    7007 afs3-bos basic overseer process
    7008 afs3-update server-to-server updater
    7009 afs3-rmtsys remote cache manager service
    7010 ups-onlinet onlinet uninterruptable power supplies
    7011 talon-disc Talon Discovery Port
    7012 talon-engine Talon Engine
    7013 microtalon-dis Microtalon Discovery
    7014 microtalon-com Microtalon Communications
    7015 talon-webserver Talon Webserver
    7020 dpserve DP Serve
    7021 dpserveadmin DP Serve Admin
    7070 arcp ARCP
    7099 lazy-ptop lazy-ptop
    7100 font-service X Font Service
    7121 virprot-lm Virtual Prototypes License Manager
    7174 clutild Clutild
    7200 fodms FODMS FLIP
    7201 dlip DLIP
    7280 itactionserver1 ITACTIONSERVER 1
    7281 itactionserver2 ITACTIONSERVER 2
    7300 swx the swiss exchange
    7301 swx the swiss exchange
    7302 swx the swiss exchange
    7303 swx the swiss exchange
    7304 swx the swiss exchange
    7305 swx the swiss exchange
    7306 swx the swiss exchange
    7307 swx the swiss exchange
    7308 swx the swiss exchange
    7309 swx the swiss exchange
    7310 swx the swiss exchange
    7311 swx the swiss exchange
    7312 swx the swiss exchange
    7313 swx the swiss exchange
    7314 swx the swiss exchange
    7315 swx the swiss exchange
    7316 swx the swiss exchange
    7317 swx the swiss exchange
    7318 swx the swiss exchange
    7319 swx the swiss exchange
    7320 swx the swiss exchange
    7321 swx the swiss exchange
    7322 swx the swiss exchange
    7323 swx the swiss exchange
    7324 swx the swiss exchange
    7325 swx the swiss exchange
    7326 swx the swiss exchange, internet citizen’s band
    7327 swx the swiss exchange
    7328 swx the swiss exchange
    7329 swx the swiss exchange
    7330 swx the swiss exchange
    7331 swx the swiss exchange
    7332 swx the swiss exchange
    7333 swx the swiss exchange
    7334 swx the swiss exchange
    7335 swx the swiss exchange
    7336 swx the swiss exchange
    7337 swx the swiss exchange
    7338 swx the swiss exchange
    7339 swx the swiss exchange
    7340 swx the swiss exchange
    7341 swx the swiss exchange
    7342 swx the swiss exchange
    7343 swx the swiss exchange
    7344 swx the swiss exchange
    7345 swx the swiss exchange
    7346 swx the swiss exchange
    7347 swx the swiss exchange
    7348 swx the swiss exchange
    7349 swx the swiss exchange
    7350 swx the swiss exchange
    7351 swx the swiss exchange
    7352 swx the swiss exchange
    7353 swx the swiss exchange
    7354 swx the swiss exchange
    7355 swx the swiss exchange
    7356 swx the swiss exchange
    7357 swx the swiss exchange
    7358 swx the swiss exchange
    7359 swx the swiss exchange
    7360 swx the swiss exchange
    7361 swx the swiss exchange
    7362 swx the swiss exchange
    7363 swx the swiss exchange
    7364 swx the swiss exchange
    7365 swx the swiss exchange
    7366 swx the swiss exchange
    7367 swx the swiss exchange
    7368 swx the swiss exchange
    7369 swx the swiss exchange
    7370 swx the swiss exchange
    7371 swx the swiss exchange
    7372 swx the swiss exchange
    7373 swx the swiss exchange
    7374 swx the swiss exchange
    7375 swx the swiss exchange
    7376 swx the swiss exchange
    7377 swx the swiss exchange
    7378 swx the swiss exchange
    7379 swx the swiss exchange
    7380 swx the swiss exchange
    7381 swx the swiss exchange
    7382 swx the swiss exchange
    7383 swx the swiss exchange
    7384 swx the swiss exchange
    7385 swx the swiss exchange
    7386 swx the swiss exchange
    7387 swx the swiss exchange
    7388 swx the swiss exchange
    7389 swx the swiss exchange
    7390 swx the swiss exchange
    7391 mindfilesys mind-file system server
    7392 mrssrendezvous mrss-rendezvous server
    7395 winqedit winqedit
    7426 pmdmgr OpenView DM Postmaster Manager
    7427 oveadmgr OpenView DM Event Agent Manager
    7428 ovladmgr OpenView DM Log Agent Manager
    7429 opi-sock OpenView DM rqt communication
    7430 xmpv7 OpenView DM xmpv7 api pipe
    7431 pmd OpenView DM ovc/xmpv3 api pipe
    7437 faximum Faximum
    7491 telops-lmd telops-lmd
    7511 pafec-lm pafec-lm
    7544 nta-ds FlowAnalyzer DisplayServer
    7545 nta-us FlowAnalyzer UtilityServer
    7566 vsi-omega VSI Omega
    7570 aries-kfinder Aries Kfinder
    7588 sun-lm Sun License Manager
    7633 pmdfmgt PMDF Management
    7777 cbt cbt
    7778 interwise Interwise
    7779 vstat VSTAT
    7781 accu-lmgr accu-lmgr
    7786 minivend MINIVEND
    7789 trojan Back Door Setup, ICKiller Trojan
    7932 t2-drm Tier 2 Data Resource Manager
    7933 t2-brm Tier 2 Business Rules Manager
    7967 supercell Supercell
    7979 micromuse-ncps Micromuse-ncps
    7980 quest-vista Quest Vista
    7999 irdmi2 iRDMI2
    8000 irdmi iRDMI
    8001 vcom-tunnel VCOM Tunnel
    8002 teradataordbms Teradata ORDBMS
    8008 http-alt HTTP Alternate
    8022 oa-system oa-system
    8032 pro-ed ProEd
    8033 mindprint MindPrint
    8080 http-alt HTTP Alternate (see port 80)
    8130 indigo-vrmi INDIGO-VRMI
    8131 indigo-vbcp INDIGO-VBCP
    8132 dbabble dbabble
    8160 patrol Patrol
    8161 patrol-snmp Patrol SNMP
    8200 trivnet1 TRIVNET
    8201 trivnet2 TRIVNET
    8204 lm-perfworks LM Perfworks
    8205 lm-instmgr LM Instmgr
    8206 lm-dta LM Dta
    8207 lm-sserver LM SServer
    8208 lm-webwatcher LM Webwatcher
    8351 server-find Server Find
    8376 cruise-enum Cruise ENUM
    8377 cruise-swroute Cruise SWROUTE
    8378 cruise-config Cruise CONFIG
    8379 cruise-diags Cruise DIAGS
    8380 cruise-update Cruise UPDATE
    8400 cvd cvd
    8401 sabarsd sabarsd
    8402 abarsd abarsd
    8403 admind admind
    8450 npmp npmp
    8473 vp2p Virtual Point to Point
    8554 rtsp-alt RTSP Alternate (see port 554)
    8733 ibus iBus
    8763 mc-appserver MC-APPSERVER
    8764 openqueue OPENQUEUE
    8765 ultraseek-http Ultraseek HTTP
    8804 truecm truecm
    8880 cddbp-alt CDDBP
    8888 ddi-tcp-1 NewsEDGE server TCP (TCP 1)
    8889 ddi-tcp-2 Desktop Data TCP 1
    8890 ddi-tcp-3 Desktop Data TCP 2
    8891 ddi-tcp-4 Desktop Data TCP 3: NESS application
    8892 ddi-tcp-5 Desktop Data TCP 4: FARM product
    8893 ddi-tcp-6 Desktop Data TCP 5: NewsEDGE/Web application
    8894 ddi-tcp-7 Desktop Data TCP 6: COAL application
    8900 jmb-cds1 JMB-CDS 1
    8901 jmb-cds2 JMB-CDS 2
    9000 cslistener CSlistener
    9090 websm WebSM
    9091 xmltec-xmlmail xmltec-xmlmail
    9100 jetdirect hp jetdirect card
    9160 netlock1 NetLOCK1
    9161 netlock2 NetLOCK2
    9162 netlock3 NetLOCK3
    9163 netlock4 NetLOCK4
    9164 netlock5 NetLOCK5
    9200 wap-wsp WAP connectionless session service
    9201 wap-wsp-wtp WAP session service
    9202 wap-wsp-s WAP secure connectionless session service
    9203 wap-wsp-wtp-s WAP secure session service
    9204 wap-vcard WAP vCard
    9205 wap-vcal WAP vCal
    9206 wap-vcard-s WAP vCard Secure
    9207 wap-vcal-s WAP vCal Secure
    9283 callwaveiam CallWaveIAM
    9292 armtechdaemon ArmTech Daemon
    9321 guibase guibase
    9343 mpidcmgr MpIdcMgr
    9344 mphlpdmc Mphlpdmc
    9346 ctechlicensing C Tech Licensing
    9374 fjdmimgr fjdmimgr
    9396 fjinvmgr fjinvmgr
    9397 mpidcagt MpIdcAgt
    9500 ismserver ismserver
    9535 man man 9535/tcp
    9594 msgsys Message System
    9595 pds Ping Discovery Service
    9600 micromuse-ncpw MICROMUSE-NCPW
    9753 rasadv rasadv
    9872 trojan Portal of Doom Trojan
    9873 trojan Portal of Doom v1.x Trojan
    9874 trojan Portal of Doom v2.x Trojan
    9875 trojan Portal of Doom v3.x Trojan
    9876 sd Session Director
    9888 cyborg-systems CYBORG Systems
    9898 monkeycom MonkeyCom
    9899 sctp-tunneling SCTP TUNNELING
    9900 iua IUA
    9909 domaintime domaintime
    9950 apcpcpluswin1 APCPCPLUSWIN1
    9951 apcpcpluswin2 APCPCPLUSWIN2
    9952 apcpcpluswin3 APCPCPLUSWIN3
    9989 trojan iNi-Killer Trojan
    9992 palace palace
    9993 palace palace
    9994 palace palace
    9995 palace palace
    9996 palace palace
    9997 palace palace
    9998 distinct32 Distinct32
    9999 distinct distinct
    10000 ndmp Network Data Management Protocol
    10005 stel secure telnet
    10007 mvs-capacity MVS Capacity
    10067 trojan Portal of Doom v4.x Trojan
    10080 amanda Amanda
    10082 amandaidx amanda indexing
    10083 amidxtape amanda tape indexing
    10113 netiq-endpoint NetIQ Endpoint
    10114 netiq-qcheck NetIQ Qcheck
    10115 ganymede-endpt ganymede endpoint
    10128 bmc-perf-sd BMC-PERFORM-SERVICE DAEMON
    10167 trojan Portal of Doom v5.x Trojan
    10288 blocks Blocks
    11000 irisa IRISA
    11001 metasys Metasys
    11111 vce Viral Computing Environment (VCE)
    11201 smsqp smsqp
    11223 trojan Progenic trojan Trojan
    11319 imip IMIP
    11367 atm-uhas ATM UHAS
    11720 h323callsigalt h323 Call Signal Alternate
    12000 entextxid IBM Enterprise Extender SNA XID Exchange
    12001 entextnetwk IBM Enterprise Extender SNA COS Network Priority
    12002 entexthigh IBM Enterprise Extender SNA COS High Priority
    12003 entextmed IBM Enterprise Extender SNA COS Medium Priority
    12004 entextlow IBM Enterprise Extender SNA COS Low Priority
    12172 hivep HiveP
    12223 trojan Hack’99 KeyLogger Trojan
    12345 Net


  • rpm command cheat sheet for Linux

    rpm is a powerful Package Manager for Red Hat, Suse and Fedora Linux. It can be used to build, install, query, verify, update, and remove/erase individual software packages. A Package consists of an archive of files, and package information, including name, version, and description:

    Syntax Description Example(s)
    rpm -ivh {rpm-file} Install the package rpm -ivh mozilla-mail-1.7.5-17.i586.rpm
    rpm -ivh –test mozilla-mail-1.7.5-17.i586.rpm
    rpm -Uvh {rpm-file} Upgrade package rpm -Uvh mozilla-mail-1.7.6-12.i586.rpm
    rpm -Uvh –test mozilla-mail-1.7.6-12.i586.rpm
    rpm -ev {package} Erase/remove/ an installed package rpm -ev mozilla-mail
    rpm -ev –nodeps {package} Erase/remove/ an installed package without checking for dependencies rpm -ev –nodeps mozilla-mail
    rpm -qa Display list all installed packages rpm -qa
    rpm -qa | less
    rpm -qi {package} Display installed information along with package version and short description rpm -qi mozilla-mail
    rpm -qf {/path/to/file} Find out what package a file belongs to i.e. find what package owns the file rpm -qf /etc/passwd
    rpm -qf /bin/bash
    rpm -qc {pacakge-name} Display list of configuration file(s) for a package rpm -qc httpd
    rpm -qcf {/path/to/file} Display list of configuration files for a command rpm -qcf /usr/X11R6/bin/xeyes
    rpm -qa –last Display list of all recently installed RPMs rpm -qa –last
    rpm -qa –last | less
    rpm -qpR {.rpm-file}
    rpm -qR {package}
    Find out what dependencies a rpm file has rpm -qpR mediawiki-1.4rc1-4.i586.rpm
    rpm -qR bash